Major refactoring of the "build" workflow

Currently the Maven/SciJava part is disabled until testing of the
changes is completed.

With the modifications this will now also build and publish the Python
flavor package on PyPi, and will trigger the "deploy-pages" workflow in
the 'imcf/imcf.github.io' repo.

Author: ehrenfeu

.github/workflows/build.yml

@@ -1,35 +1,163 @@
-name: build
+name: 🚚🌍 Publish to 🔬☕ SciJava and 🎪 PyPI
 
 on:
+  workflow_dispatch:
+
   push:
     branches:
       - master
     tags:
-      - "*-[0-9]+.*"
+      - "python-imcflibs-[0-9]+.*"
   pull_request:
     branches:
       - master
 
+
 jobs:
-  build:
+
+  # publish-to-scijava:
+
+  #   name: 🔬☕ publish via Ⓜ Maven to SciJava
+
+  #   runs-on: ubuntu-latest
+
+  #   steps:
+
+  #     - uses: actions/checkout@v4
+  #       name: 📥 Checkout repo
+
+  #     - name: ☕ Set up Java
+  #       uses: actions/setup-java@v3
+  #       with:
+  #         java-version: '8'
+  #         distribution: 'zulu'
+  #         cache: 'maven'
+
+  #     - name: 🪐 Set up CI environment
+  #       run: .github/setup.sh
+
+  #     - name: 👷 Build and publish on 🔬☕ SciJava
+  #       run: .github/build.sh
+  #       env:
+  #         GPG_KEY_NAME: ${{ secrets.GPG_KEY_NAME }}
+  #         GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+  #         MAVEN_USER: ${{ secrets.MAVEN_USER }}
+  #         MAVEN_PASS: ${{ secrets.MAVEN_PASS }}
+  #         OSSRH_PASS: ${{ secrets.OSSRH_PASS }}
+  #         SIGNING_ASC: ${{ secrets.SIGNING_ASC }}
+
+
+  build-via-poetry:
+
+    name: 👷 build via 🎭 Poetry
+
+    runs-on: ubuntu-22.04
+
+    steps:
+    - uses: actions/checkout@v4
+      name: 📥 Checkout repo
+
+    - name: 🕵 Inspect if this is a proper "scijava-scripts" release
+      run: scripts/check-if-release.sh
+
+    - name: 🐍 Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: "3.10"
+
+    - name: 🗃 Cache 🎭 Poetry install
+      uses: actions/cache@v4
+      with:
+        path: ~/.local
+        key: poetry-2.0.1-0
+
+    # The key configuration value here is `virtualenvs-in-project: true`: this
+    # creates the venv as a `.venv` in your testing directory, which allows
+    # the next step to easily cache it.
+    - name: 🔩🔧 Install 🎭 Poetry
+      uses: snok/install-poetry@v1
+      with:
+        version: 2.0.1
+        virtualenvs-create: true
+        virtualenvs-in-project: true
+
+    # Cache dependencies (i.e. all the stuff in your `pyproject.toml`).
+    - name: 🗃 Cache 🧾 Dependencies
+      id: cache-deps
+      uses: actions/cache@v4
+      with:
+        path: .venv
+        key: pydeps-${{ hashFiles('**/poetry.lock') }}
+
+    # No Poetry dynamic versioning in this project, we're using the POM instead!
+    # - name: 🎭 Install Poetry dynamic-versioning 🔌 plugin
+    #   run: poetry self add "poetry-dynamic-versioning[plugin]"
+
+    # Install dependencies. `--no-root` means "install all dependencies but
+    # not the project itself", which is what you want to avoid caching _your_
+    # code. The `if` statement ensures this only runs on a cache miss.
+    - name: 🎭 Install 🧾 Dependencies
+      run: scripts/run-poetry.sh install --no-interaction --no-root
+      if: steps.cache-deps.outputs.cache-hit != 'true'
+
+    - name: 🎭 Install 🛖 project
+      run: scripts/run-poetry.sh install --no-interaction
+
+    - name: 🎭👷 Build 🧱 project
+      run: scripts/run-poetry.sh build
+
+    - name: 📤 Upload build artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: release-dists
+        path: dist/
+
+
+  publish-to-pypi:
+
+    name: 🚚🌍 publish to 🎪 PyPI
+
     runs-on: ubuntu-latest
 
+    needs:
+      - release-build
+
+    permissions:
+      id-token: write
+
+    environment:
+      name: release
+
     steps:
-      - uses: actions/checkout@v2
-      - name: Set up Java
-        uses: actions/setup-java@v3
+      - name: 📥 Retrieve release 📦 distributions
+        uses: actions/download-artifact@v4
         with:
-          java-version: '8'
-          distribution: 'zulu'
-          cache: 'maven'
-      - name: Set up CI environment
-        run: .github/setup.sh
-      - name: Execute the build
-        run: .github/build.sh
-        env:
-          GPG_KEY_NAME: ${{ secrets.GPG_KEY_NAME }}
-          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-          MAVEN_USER: ${{ secrets.MAVEN_USER }}
-          MAVEN_PASS: ${{ secrets.MAVEN_PASS }}
-          OSSRH_PASS: ${{ secrets.OSSRH_PASS }}
-          SIGNING_ASC: ${{ secrets.SIGNING_ASC }}
+          name: release-dists
+          path: dist/
+
+      - name: 🥁 Publish release distributions to 🎪 PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist/
+
+
+  trigger-foreign-workflows:
+
+    name: 🚀 Dispatch foreign workflows
+
+    strategy:
+      matrix:
+        repo: ['imcf/imcf.github.io']
+
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: 🏹 Fire event on `${{ matrix.repo }}`
+        run: |
+          curl -L \
+            -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ secrets.DISPATCH_DEPLOY_PAGES }}" \
+            -H "X-GitHub-Api-Version: 2022-11-28" \
+            https://api.github.com/repos/${{ matrix.repo }}/dispatches \
+            -d '{"event_type":"dispatch-event"}'