ci: require to test python package and docker build before publishing

Author: sdn4z

.github/actions/docker-build/action.yml

@@ -44,6 +44,11 @@ inputs:
     required: false
     default: "false"
 
+outputs:
+  image-tag:
+    description: "Tag of the built image"
+    value: ${{ steps.meta.outputs.tags }}
+
 runs:
   using: "composite"
   steps:
@@ -71,7 +76,7 @@ runs:
           type=semver,enable=true,pattern={{major}},prefix=v
           type=ref,event=pr,prefix=pr-,enable=true
           type=ref,event=branch,branch=main,pattern={{raw}}
-          type=ref,event=branch,branch=main,pattern={{major}},prefix=v
+          type=ref,event=branch,branch=main,pattern={{major}}
 
     - name: Build Docker image
       uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0

.github/workflows/build-test-docker.yml

@@ -1,10 +1,12 @@
 name: Build and Test Docker Image
 
 on:
-  pull_request:
-    branches: ["main"]
-  push:
-    branches: ["main"]
+  # pull_request:
+  #   branches: ["main"]
+  workflow_call:
+    inputs:
+      config:
+        type: string
 
 jobs:
   should-test-docker-build:

.github/workflows/build-test-python.yml

@@ -3,10 +3,12 @@
 name: Build and Test Python Package
 
 on:
-  pull_request:
-    branches: ["main"]
-  push:
-    branches: ["main"]
+  # pull_request:
+  #   branches: ["main"]
+  workflow_call:
+    inputs:
+      config:
+        type: string
 
 env:
   PYTHON_VERSION: "3.10"

.github/workflows/publish.yml

@@ -4,33 +4,47 @@ on:
   push:
     tags:
       - "v*.*.*"
+  pull_request:
+    branches: ["main"]
+env:
+  UV_VERSION: "0.8.22"
+  PYTHON_VERSION: "3.10"
 
 jobs:
+  build_and_test_package:
+    uses: ./.github/workflows/build-test-python.yml
+
+  build_and_test_docker:
+    uses: ./.github/workflows/build-test-docker.yml
+
   publish_to_pypi:
     name: Publish to PyPI
     runs-on: ubuntu-latest
-
+    needs: [build_and_test_package, build_and_test_docker]
     permissions:
       id-token: write
-      contents: read
-
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Build package
-        uses: ./.github/actions/python-package-build
-        id: build
+      - name: Download package artifacts
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        with:
+          name: python-package-${{ github.sha }}
+          path: dist
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
         with:
-          uv-version: "0.8.22"
-          python-version: "3.10"
+          version: ${{ env.UV_VERSION }}
 
-      - name: Publish package
-        run: |
-          uv publish
+      # - name: Publish package
+      #   run: |
+      #     uv publish
 
   publish_to_dockerhub:
     name: Push Docker images to registries
     runs-on: ubuntu-latest
+    needs: [build_and_test_docker, build_and_test_package]
     permissions:
       contents: read
       packages: write
@@ -54,7 +68,7 @@ jobs:
       - name: Push Docker images
         uses: ./.github/actions/docker-build
         with:
-          push: "true"
+          # push: "true"
           platforms: linux/amd64,linux/arm64
           dockerfile: ./Dockerfile
           context: .
@@ -63,21 +77,21 @@ jobs:
             type=registry,ref=ghcr.io/elementsinteractive/twyn:buildcache-amd64
             type=registry,ref=ghcr.io/elementsinteractive/twyn:buildcache-arm64
 
-      - name: Delete old cache entries
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          # Get all versions of the container package
-          versions=$(gh api "orgs/elementsinteractive/packages/container/twyn/versions" --paginate)
+      # - name: Delete old cache entries
+      #   env:
+      #     GH_TOKEN: ${{ github.token }}
+      #   run: |
+      #     # Get all versions of the container package
+      #     versions=$(gh api "orgs/elementsinteractive/packages/container/twyn/versions" --paginate)
 
-          # Extract version IDs that do NOT have any buildcache-* tags (buildcache-amd64, buildcache-arm64, etc.)
-          ids_to_delete=$(echo "$versions" | jq -r '.[] | select(.metadata.container.tags | map(test("^buildcache-")) | any | not) | .id')
+      #     # Extract version IDs that do NOT have any buildcache-* tags (buildcache-amd64, buildcache-arm64, etc.)
+      #     ids_to_delete=$(echo "$versions" | jq -r '.[] | select(.metadata.container.tags | map(test("^buildcache-")) | any | not) | .id')
 
-          # Delete them
-          for id in $ids_to_delete; do
-            echo "Deleting old cache version ID: $id"
-            gh api -X DELETE "orgs/elementsinteractive/packages/container/twyn/versions/$id"
-          done
+      #     # Delete them
+      #     for id in $ids_to_delete; do
+      #       echo "Deleting old cache version ID: $id"
+      #       gh api -X DELETE "orgs/elementsinteractive/packages/container/twyn/versions/$id"
+      #     done
 
   release_notes:
     runs-on: ubuntu-latest