python_package.yml

name: Publish Python package

on:
  push:
    tags:
      - "v*.*.*"

jobs:
  build-pypi-dists:
    name: Build Python package

    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.inputs.commit }}
          # Versioneer only generates correct versions with a full fetch
          fetch-depth: 0
          persist-credentials: false

      - name: Install poetry
        run: pipx install poetry

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.10"
          cache: "poetry"

      - name: Install python packages
        run: poetry install

      - name: Build a binary wheel and a source tarball
        run: |
          poetry build

      - name: Publish build artifacts
        uses: actions/upload-artifact@v4
        with:
          name: pypi-dists
          path: "./dist"

  publish-pypi-dists:
    name: Publish to PyPI
    environment:
      name: release
      url: https://pypi.org/p/otf-api
    needs: [build-pypi-dists]
    runs-on: ubuntu-latest
    permissions:
      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing

    steps:
      - name: Download build artifacts
        uses: actions/download-artifact@v4
        with:
          name: pypi-dists
          path: "./dist"

      - name: Publish distribution to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1

  # create-release:
  #   name: Create a release
  #   environment:
  #     name: release
  #     url: https://pypi.org/p/otf-api
  #   needs: [publish-pypi-dists]
  #   runs-on: ubuntu-latest
  #   permissions:
  #     id-token: write # IMPORTANT: this permission is mandatory for trusted publishing

  #   steps:
  #     - name: Release
  #       uses: softprops/action-gh-release@v2
  #       with:
  #         generate_release_notes: true
  #         files: "./dist"
  #         make_latest: true