cd.yml

name: CD
on:
  push:
    branches: [main]
  release:
    types: [published]
  workflow_dispatch:

permissions:
  attestations: write
  contents: read
  id-token: write

jobs:
  # Builds the sdist and wheels on all supported platforms and uploads the resulting
  # wheels as GitHub artifacts `dev-cibw-*`, `test-cibw-*`, or `cibw-*`, depending on
  # whether the workflow is triggered from a PR, a push to main, or a release, respectively.
  python-packaging:
    name: 🐍 Packaging
    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-packaging.yml@v1.4
    with:
      # Do not include local version information on pushes to main to facilitate TestPyPI uploads.
      no-local-version: ${{ github.ref == 'refs/heads/main' && github.event_name == 'push' }}
      # Do not build emulated wheels on pushes to main to reduce runner load for CD.
      build-emulated-wheels: ${{ github.ref != 'refs/heads/main' || github.event_name != 'push' }}

  # Downloads the previously generated artifacts and deploys to TestPyPI on pushes to main
  deploy-test-pypi:
    name: 🚀 Deploy to Test PyPI
    runs-on: ubuntu-latest
    environment:
      name: test-pypi
      url: https://test.pypi.org/p/mqt.qcec
    needs: [python-packaging]
    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
    steps:
      - uses: actions/download-artifact@v4
        with:
          pattern: test-cibw-*
          path: dist
          merge-multiple: true
      - uses: pypa/gh-action-pypi-publish@release/v1
        with:
          repository-url: https://test.pypi.org/legacy/
          attestations: true

  # Downloads the previously generated artifacts and deploys to PyPI on published releases.
  deploy:
    if: github.event_name == 'release' && github.event.action == 'published'
    name: 🚀 Deploy to PyPI
    runs-on: ubuntu-latest
    environment:
      name: pypi
      url: https://pypi.org/p/mqt.qcec
    needs: [python-packaging]
    steps:
      - uses: actions/download-artifact@v4
        with:
          pattern: cibw-*
          path: dist
          merge-multiple: true
      - name: Generate artifact attestation for sdist and wheel(s)
        uses: actions/attest-build-provenance@v1.4.4
        with:
          subject-path: "dist/*"
      - uses: pypa/gh-action-pypi-publish@release/v1
        with:
          attestations: true