publish.yml

name: publish

on:
    workflow_dispatch:
        inputs:
            VERSION:
                description: "The version to release"
                required: true
            IS_PRE_RELEASE:
                description: "It IS a pre-release"
                required: true
                default: false
                type: boolean

jobs:
    bump: # This job is used to bump the version and create a release
        runs-on: ubuntu-latest
        env:
            VERSION: ${{ inputs.VERSION }}
            GH_TOKEN: ${{ github.token }}
            SSH_AUTH_SOCK: /tmp/ssh_agent.sock
        permissions:
            contents: write
        steps:
            - name: set up Python
              uses: actions/setup-python@v5
              with:
                  python-version: "3.12"

            - name: install dependencies
              run: |
                  pip install --upgrade pip
                  pip install build hatch

            - name: configure git with the bot credentials
              run: |
                  mkdir -p ~/.ssh
                  ssh-keyscan github.com >> ~/.ssh/known_hosts
                  ssh-agent -a $SSH_AUTH_SOCK > /dev/null
                  ssh-add - <<< "${{ secrets.BOT_SSH_KEY }}"

                  echo "${{ secrets.BOT_SIGNING_KEY }}" > ~/.ssh/signing.key
                  chmod 600 ~/.ssh/signing.key

                  git config --global user.name "Merschbotmann"
                  git config --global user.email "bot.merschformann@gmail.com"
                  git config --global gpg.format ssh
                  git config --global user.signingkey ~/.ssh/signing.key

                  git clone git@github.com:merschformann/brickmos.git

            - name: upgrade version with hatch
              run: hatch version ${{ env.VERSION }}
              working-directory: ./brickmos

            - name: commit new version
              run: |
                  git add brickmos/__about__.py
                  git commit -S -m "Bump version to $VERSION"
                  git push
                  git tag $VERSION
                  git push origin $VERSION
              working-directory: ./brickmos

            - name: create release
              run: |
                  PRERELEASE_FLAG=""
                  if [ ${{ inputs.IS_PRE_RELEASE }} = true ]; then
                    PRERELEASE_FLAG="--prerelease"
                  fi

                  gh release create $VERSION \
                  --verify-tag \
                  --generate-notes \
                  --title $VERSION $PRERELEASE_FLAG
              working-directory: ./brickmos

            - name: ensure passing build
              run: python -m build
              working-directory: ./brickmos

    publish: # This job is used to publish the release to PyPI/TestPyPI
        runs-on: ubuntu-latest
        needs: bump
        strategy:
            matrix:
                include:
                    - target-env: pypi
                      target-url: https://pypi.org/p/brickmos
                    - target-env: testpypi
                      target-url: https://test.pypi.org/p/brickmos
        environment:
            name: ${{ matrix.target-env }}
            url: ${{ matrix.target-url }}
        permissions:
            contents: read
            id-token: write # This is required for trusted publishing to PyPI
        steps:
            - name: git clone main
              uses: actions/checkout@v4
              with:
                  ref: main

            - name: set up Python
              uses: actions/setup-python@v5
              with:
                  python-version: "3.12"

            - name: install dependencies
              run: |
                  pip install --upgrade pip
                  pip install build hatch

            - name: build binary wheel and source tarball
              run: python -m build

            - name: Publish package distributions to PyPI
              if: ${{ matrix.target-env == 'pypi' }}
              uses: pypa/gh-action-pypi-publish@release/v1
              with:
                  packages-dir: ./dist

            - name: Publish package distributions to TestPyPI
              if: ${{ matrix.target-env == 'testpypi' }}
              uses: pypa/gh-action-pypi-publish@release/v1
              with:
                  repository-url: https://test.pypi.org/legacy/
                  packages-dir: ./dist