publish.yml

name: Publish to PyPI

on:
  push:
    tags:
      - "v*"
  workflow_dispatch:

jobs:
  build-n-publish:
    name: Build and publish to PyPI
    runs-on: ubuntu-latest
    environment:
      name: release
    permissions:
          id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
    steps:
      - name: Checkout source
        uses: actions/checkout@v4
        with:
          # Get history and tags for SCM versioning to work
          fetch-depth: 0
      - name: Install the latest version of uv with cache enabled
        uses: astral-sh/setup-uv@v5
        with:
          version: "latest"
          enable-cache: true
          cache-dependency-glob: ""

      - name: Check that the current version isn't already on PyPi
        run: |
          if [ "$(./get_pypi_latest_version.sh)" != "$(git describe --tags)" ]
          then
            echo "Current version is not on PyPI, proceed with bulding"
          else
            echo "Current version is the latest version uploaded to PyPI"
            exit 1
          fi

      - name: Build a binary wheel and a source tarball
        run: uvx --from build pyproject-build --sdist --wheel

      - name: Publish distribution to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1