django-dbml/.github/workflows/production.yml at main · makecodes/django-dbml · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
name: Publish 📦 to PyPI

on:
  push:
    tags:
      - "*.*.*"

permissions:
  contents: read

jobs:
  metadata:
    name: Release Metadata
    runs-on: ubuntu-latest
    outputs:
      package_version: ${{ steps.version.outputs.package_version }}
      git_tag: ${{ steps.version.outputs.git_tag }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Read package version
        id: version
        run: |
          python3 - <<'PY'
          import os
          import tomllib
          from pathlib import Path

          git_tag = os.environ["GITHUB_REF_NAME"]
          version = tomllib.loads(Path("pyproject.toml").read_text(encoding="utf-8"))["project"]["version"]
          expected_tag = version
          if git_tag != expected_tag:
              raise SystemExit(f"Tag {git_tag!r} does not match project version {expected_tag!r}")
          with open(os.environ["GITHUB_OUTPUT"], "a", encoding="utf-8") as fh:
              fh.write(f"package_version={version}\n")
              fh.write(f"git_tag={git_tag}\n")
          print(f"{git_tag} -> {version}")
          PY

  verify:
    name: Verify Release Candidate
    uses: ./.github/workflows/ci.yml

  build:
    name: Build Release (${{ needs.metadata.outputs.package_version }})
    runs-on: ubuntu-latest
    needs: [metadata, verify]
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.13"
      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
      - name: Sync dependencies
        run: make sync
      - name: Build package
        run: make build
      - name: Upload distribution artifacts
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: dist-${{ needs.metadata.outputs.package_version }}
          path: dist/*
          if-no-files-found: error

  publish:
    name: Publish Release (${{ needs.metadata.outputs.package_version }})
    runs-on: ubuntu-latest
    needs: [metadata, build]
    permissions:
      contents: read
      id-token: write
    environment: pypi
    steps:
      - name: Download distribution artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: dist-${{ needs.metadata.outputs.package_version }}
          path: dist
      - name: Publish package
        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
        with:
          packages-dir: dist