python-publish.yml

# This workflow will upload a Python Package using Twine when a release is created
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-python#publishing-to-package-registries

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

name: Upload Python Package

on:
  release:
    types: [published]


jobs:

  build_native_wheels:
    name: Build native wheels on ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest, macos-15-intel, macos-15]

    steps:
      - uses: actions/checkout@v4

      # Used to host cibuildwheel
      - uses: actions/setup-python@v5

      - name: Install cibuildwheel and native deps
        run: |
          python -m pip install --upgrade pip
          python -m pip install cibuildwheel==3.2.1
          python fetch_dependencies.py

      - name: Build native wheels
        env:
          CIBW_SKIP: 'pp* manylinux_i686 musllinux*'
          VKDISPATCH_BUILD_TARGET: native
          CIBW_ENVIRONMENT: VKDISPATCH_BUILD_TARGET=native
        run: python -m cibuildwheel --output-dir wheelhouse
        
        # to supply options, put them in 'env', like:
        # env:
        #   CIBW_SOME_OPTION: value

      - uses: actions/upload-artifact@v4
        with:
          name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }}
          path: ./wheelhouse/*.whl
  build_python_dists:
    name: Build native/core/meta sdists and pure wheels
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-python@v5

      - name: Install build tooling
        run: |
          python -m pip install --upgrade pip
          python -m pip install build

      - name: Build native source distribution
        env:
          VKDISPATCH_BUILD_TARGET: native
        run: |
          python fetch_dependencies.py
          python -m build --sdist --outdir dist

      - name: Build core wheel and source distribution
        env:
          VKDISPATCH_BUILD_TARGET: core
        run: python -m build --wheel --sdist --outdir dist

      - name: Build meta wheel and source distribution
        env:
          VKDISPATCH_BUILD_TARGET: meta
        run: python -m build --wheel --sdist --outdir dist

      - uses: actions/upload-artifact@v4
        with:
          name: cibw-python-dists
          path: dist/*
  publish-to-pypi:
    name: Publish Python package to PyPI
    # if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
    needs: [build_native_wheels, build_python_dists]
    runs-on: ubuntu-latest
    environment:
      name: pypi
      url: https://pypi.org/p/vkdispatch/
    permissions:
      id-token: write  # IMPORTANT: mandatory for trusted publishing

    steps:
      - name: Download all the dists
        uses: actions/download-artifact@v4
        with:
          pattern: cibw-*
          path: dist
          merge-multiple: true
      - name: Publish package to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
  # github-release:
  #   name: >-
  #     Sign the Python package with Sigstore
  #     and upload them to GitHub Release
  #   needs:
  #   - publish-to-pypi
  #   runs-on: ubuntu-latest

  #   permissions:
  #     contents: write  # IMPORTANT: mandatory for making GitHub Releases
  #     id-token: write  # IMPORTANT: mandatory for sigstore

  #   steps:
  #   - name: Download all the dists
  #     uses: actions/download-artifact@v3
  #     with:
  #       name: python-package-distributions
  #       path: dist/
  #   - name: Sign the dists with Sigstore
  #     uses: sigstore/gh-action-sigstore-python@v2.1.1
  #     with:
  #       inputs: >-
  #         ./dist/*.tar.gz
  #         ./dist/*.whl
  #   - name: Create GitHub Release
  #     env:
  #       GITHUB_TOKEN: ${{ github.token }}
  #     run: >-
  #       gh release create
  #       '${{ github.ref_name }}'
  #       --repo '${{ github.repository }}'
  #       --notes ""
  #   - name: Upload artifact signatures to GitHub Release
  #     env:
  #       GITHUB_TOKEN: ${{ github.token }}
  #     # Upload to GitHub Release using the `gh` CLI.
  #     # `dist/` contains the built packages, and the
  #     # sigstore-produced signatures and certificates.
  #     run: >-
  #       gh release upload
  #       '${{ github.ref_name }}' dist/**
  #       --repo '${{ github.repository }}'