release.yml

name: release

on:
  push:
    tags:
      - "v*"

permissions:
  contents: read

jobs:
  build:
    name: Build distribution files
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install build tools
        run: |
          python -m pip install --upgrade pip
          python -m pip install build twine

      - name: Check tag matches package version
        run: |
          python - <<'PY'
          import sys
          import tomllib
          from pathlib import Path

          ref = "${{ github.ref_name }}"
          tag_version = ref[1:] if ref.startswith("v") else ref

          pyproject = tomllib.loads(Path("pyproject.toml").read_text())
          package_version = pyproject["project"]["version"]

          if package_version != tag_version:
              print(
                  "Tag/version mismatch: "
                  f"tag {ref!r} implies {tag_version!r}, "
                  f"but pyproject.toml has {package_version!r}."
              )
              sys.exit(1)

          print(f"Release version confirmed: {package_version}")
          PY

      - name: Build package
        run: |
          python -m build

      - name: Check distribution metadata
        run: |
          python -m twine check --strict dist/*

      - name: Upload distribution artifact
        uses: actions/upload-artifact@v4
        with:
          name: dist
          path: dist/
          if-no-files-found: error

  publish:
    name: Publish to PyPI
    needs: build
    runs-on: ubuntu-latest

    environment:
      name: pypi
      url: https://pypi.org/project/idutils-online/

    permissions:
      contents: read
      id-token: write

    steps:
      - name: Download distribution artifact
        uses: actions/download-artifact@v4
        with:
          name: dist
          path: dist/

      - name: Publish distribution files to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1