python-publish.yml

name: Publish Python Package

on:
  release:
    types: [published]

permissions:
  contents: read

jobs:
  validate-release:
    name: Validate release metadata
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.metadata.outputs.version }}

    steps:
    - name: Checkout release tag
      uses: actions/checkout@v5
      with:
        ref: ${{ github.event.release.tag_name }}
        submodules: recursive

    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: "3.12"

    - name: Validate tag and Python package version
      id: metadata
      env:
        RELEASE_TAG: ${{ github.event.release.tag_name }}
      run: |
        python - <<'PY'
        import os
        import re
        import tomllib
        from pathlib import Path

        tag = os.environ["RELEASE_TAG"]
        if not re.fullmatch(r"[0-9]+\.[0-9]+\.[0-9]+", tag):
            raise SystemExit(
                f"PyPI publishing requires a numbered tag like 5.2.0; got {tag!r}"
            )

        project = tomllib.loads(Path("pyproject.toml").read_text(encoding="utf-8"))["project"]
        version = project["version"]
        if version != tag:
            raise SystemExit(
                f"pyproject.toml version {version!r} does not match release tag {tag!r}"
            )

        with open(os.environ["GITHUB_OUTPUT"], "a", encoding="utf-8") as out:
            out.write(f"version={version}\n")
        PY

  build-wheels:
    name: Build wheels (${{ matrix.os }})
    needs: validate-release
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]

    steps:
    - name: Checkout release tag
      uses: actions/checkout@v5
      with:
        ref: ${{ github.event.release.tag_name }}
        submodules: recursive

    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: "3.12"

    - name: Install wheel tooling
      run: |
        python -m pip install --upgrade pip
        python -m pip install --upgrade cibuildwheel twine

    - name: Build wheels
      env:
        CIBW_BUILD: "cp39-* cp310-* cp311-* cp312-* cp313-* cp314-*"
      run: python -m cibuildwheel --output-dir wheelhouse

    - name: Check wheel metadata
      run: python -m twine check wheelhouse/*

    - name: Upload wheel artifacts
      uses: actions/upload-artifact@v5
      with:
        name: fastpycsv-wheels-${{ matrix.os }}
        path: wheelhouse/*
        if-no-files-found: error

  build-sdist:
    name: Build source distribution
    needs: validate-release
    runs-on: ubuntu-latest

    steps:
    - name: Checkout release tag
      uses: actions/checkout@v5
      with:
        ref: ${{ github.event.release.tag_name }}
        submodules: recursive

    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: "3.12"

    - name: Build sdist
      run: |
        python -m pip install --upgrade pip
        python -m pip install --upgrade build twine
        python -m build --sdist
        python -m twine check dist/*

    - name: Upload source artifact
      uses: actions/upload-artifact@v5
      with:
        name: fastpycsv-sdist
        path: dist/*
        if-no-files-found: error

  publish-pypi:
    name: Publish to PyPI
    needs: [validate-release, build-wheels, build-sdist]
    runs-on: ubuntu-latest
    environment:
      name: pypi
      url: https://pypi.org/p/fastpycsv
    permissions:
      contents: read
      id-token: write

    steps:
    - name: Download distributions
      uses: actions/download-artifact@v5
      with:
        pattern: fastpycsv-*
        path: dist
        merge-multiple: true

    - name: Publish distributions to PyPI
      uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b
      with:
        packages-dir: dist/