werx/.github/workflows/CI.yml at 28c023b6aa633d0859f6e0493c45d92a991e3797 · analyticsinmotion/werx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
# This file is autogenerated by maturin v1.8.3
# To update, run:
#     maturin generate-ci github
#
# Customized for trusted publishing (OIDC-based)
name: CI

on:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  # ----------------------------------------
  # Build wheels for Linux
  # ----------------------------------------
  linux:
    name: Build Linux Wheels
    runs-on: ${{ matrix.platform.runner }}
    strategy:
      matrix:
        platform:
          - runner: ubuntu-latest
            target: x86_64
          - runner: ubuntu-22.04
            target: x86_64
        python-version: ["3.10", "3.11", "3.12", "3.13"]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Build wheels
        uses: PyO3/maturin-action@v1
        with:
          args: --release --out dist --interpreter python
      - name: Upload wheels
        uses: actions/upload-artifact@v4
        with:
          name: wheels-linux-${{ matrix.platform.runner }}-${{ matrix.python-version }}
          path: dist

  # ----------------------------------------
  # Build wheels for Windows
  # ----------------------------------------
  windows:
    name: Build Windows Wheels
    runs-on: windows-latest
    strategy:
      matrix:
        python-version: ["3.10", "3.11", "3.12", "3.13"]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Build wheels
        uses: PyO3/maturin-action@v1
        with:
          args: --release --out dist --interpreter python
      - name: Upload wheels
        uses: actions/upload-artifact@v4
        with:
          name: wheels-windows-${{ matrix.python-version }}
          path: dist

  # ----------------------------------------
  # Build wheels for macOS
  # ----------------------------------------
  macos:
    name: Build macOS Wheels
    runs-on: macos-latest
    strategy:
      matrix:
        python-version: ["3.10", "3.11", "3.12", "3.13"]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Build wheels
        uses: PyO3/maturin-action@v1
        with:
          args: --release --out dist --interpreter python
      - name: Upload wheels
        uses: actions/upload-artifact@v4
        with:
          name: wheels-macos-${{ matrix.python-version }}
          path: dist

  # ----------------------------------------
  # Build source distribution (sdist)
  # ----------------------------------------
  sdist:
    name: Build Source Distribution
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Build sdist
        uses: PyO3/maturin-action@v1
        with:
          command: sdist
          args: --out dist
      - name: Upload sdist
        uses: actions/upload-artifact@v4
        with:
          name: sdist-artifact
          path: dist

  # ----------------------------------------
  # Release: Publish to PyPI with OIDC-based Trusted Publisher
  # ----------------------------------------
  release:
    name: Publish to PyPI
    runs-on: ubuntu-latest
    if: ${{ github.event_name == 'workflow_dispatch' }}
    needs: [linux, windows, macos, sdist]
    environment: pypi  # Trusted publishing environment
    permissions:
      id-token: write  # Required for OIDC-based publishing
      contents: write
      attestations: write
    steps:
      - uses: actions/download-artifact@v4
        with:
          path: .
          merge-multiple: true

      - name: List distributions before upload
        run: ls -lh .

      - name: Validate wheels
        run: |
          for file in ./*.whl; do
            echo "Checking $file"
            python -m zipfile -t "$file" || { echo "Invalid wheel: $file"; exit 1; }
          done

      - name: Publish to PyPI (trusted publisher)
        #uses: pypa/gh-action-pypi-publish@v1.8.8
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          packages-dir: ./