release.yml

name: Release

on:
  push:
    branches:
      - main

jobs:
  build-and-publish:
    name: Build and publish to (Test)PyPI
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install build tooling
        run: |
          python -m pip install --upgrade pip
          python -m pip install build twine

      - name: Build sdist / wheel
        run: python -m build

      - name: Read version from pyproject.toml
        id: meta
        run: |
          python - << 'PY'
          import os
          import pathlib
          import tomllib

          data = tomllib.loads(pathlib.Path("pyproject.toml").read_text())
          version = data.get("project", {}).get("version")
          if not version:
              raise SystemExit("No [project].version found in pyproject.toml")

          print(f"Version: {version}")

          out_path = os.environ["GITHUB_OUTPUT"]
          with open(out_path, "a", encoding="utf8") as fh:
              fh.write(f"version={version}\n")
          PY

      - name: Decide repository (TestPyPI vs PyPI)
        id: target
        shell: bash
        run: |
          version="${{ steps.meta.outputs.version }}"
          echo "Detected version: $version"

          if [[ "$version" == *"rc"* ]]; then
            echo "repo=testpypi" >> "$GITHUB_OUTPUT"
          else
            echo "repo=pypi" >> "$GITHUB_OUTPUT"
          fi

      - name: Publish to TestPyPI
        if: steps.target.outputs.repo == 'testpypi'
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.TEST_PYPI_API_TOKEN }}
        run: |
          twine upload \
            --repository-url https://test.pypi.org/legacy/ \
            --skip-existing \
            dist/*

      - name: Publish to PyPI
        if: steps.target.outputs.repo == 'pypi'
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
        run: |
          twine upload \
            --skip-existing \
            dist/*