build-wheels.yml

name: Build Wheels

on:
  release:
    types: [published]
  workflow_dispatch:  # Allow manual trigger

jobs:
  build_wheels:
    name: Build manylinux wheels with Docker
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4

    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v3

    - name: Build Docker image with GCC trunk
      run: |
        docker compose -f docker/docker-compose.yml build build
      env:
        DOCKER_BUILDKIT: 1

    - name: Build Python wheels in Docker
      run: |
        docker compose -f docker/docker-compose.yml run --rm wheel

    - name: List built wheels
      run: |
        ls -lh dist/
        echo "Built wheels:"
        ls -1 dist/*.whl

    - name: Upload wheels to release
      if: github.event_name == 'release'
      uses: actions/upload-artifact@v4
      with:
        name: wheels
        path: ./dist/*.whl

  upload_pypi:
    name: Upload to PyPI
    needs: [build_wheels]
    runs-on: ubuntu-latest
    if: github.event_name == 'release' && github.event.action == 'published'
    permissions:
      id-token: write  # Required for trusted publishing

    steps:
    - uses: actions/download-artifact@v4
      with:
        name: wheels
        path: dist

    - name: Publish to PyPI
      uses: pypa/gh-action-pypi-publish@release/v1
      with:
        password: ${{ secrets.PYPI_API_TOKEN }}