release.yml

name: Build and Publish (Pure Python)

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: read

jobs:
  build-and-publish:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: '3.11'
      - name: Install build tooling
        run: |
          python -m pip install -U pip build twine
      - name: Build sdist and wheel
        run: |
          python -m build
      - name: Determine repository (PyPI vs TestPyPI)
        id: repo
        run: |
          TAG="${GITHUB_REF_NAME}"
          if echo "$TAG" | grep -qiE 'rc|a|b|dev'; then
            echo "repo_url=https://test.pypi.org/legacy/" >> $GITHUB_OUTPUT
            echo "target_repo=TestPyPI" >> $GITHUB_OUTPUT
          else
            echo "repo_url=https://upload.pypi.org/legacy/" >> $GITHUB_OUTPUT
            echo "target_repo=PyPI" >> $GITHUB_OUTPUT
          fi
      - name: Publish to PyPI
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
        run: |
          python -m twine upload --repository-url ${{ steps.repo.outputs.repo_url }} dist/* --skip-existing