release.yml

name: Release and Publish

on:
  push:
    tags: [ 'v[0-9]+.[0-9]+.[0-9]+' ]

permissions:
  id-token: write
  contents: read

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    if: ${{ github.repository == 'substrait-io/substrait-python' }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - name: Set up Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"
      - name: Install build dependencies
        run: |
          python -m pip install build --user
      - name: Build package
        run: |
          python -m build
      - name: Upload package
        uses: actions/upload-artifact@v7
        with:
          name: dist
          path: dist/
          retention-days: 1
  github-release:
    name: Attach assets to GitHub release
    runs-on: ubuntu-latest
    needs: build
    permissions:
      contents: write
    steps:
      - name: Download artifact
        uses: actions/download-artifact@v8
        with:
          name: dist
          path: dist/
      # semantic-release creates the release for this tag in the same run that
      # pushed the tag, normally seconds before this build finishes. Wait for it
      # so the upload below attaches to that existing release (with its generated
      # notes) instead of racing ahead and creating a bare release -- which would
      # in turn make semantic-release's own release step fail with a 409.
      - name: Wait for the semantic-release GitHub release
        env:
          GH_TOKEN: ${{ github.token }}
          TAG: ${{ github.ref_name }}
        run: |
          for attempt in $(seq 1 30); do
            if gh release view "$TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
              echo "Release $TAG found."
              exit 0
            fi
            echo "Release $TAG not present yet (attempt $attempt/30); waiting 10s..."
            sleep 10
          done
          echo "::error::Release $TAG did not appear within 5 minutes; not creating a bare release." >&2
          exit 1
      # Omitting `body` leaves the generated notes untouched (the action retains
      # existing release info on update); only the wheel/sdist are attached.
      - name: Attach artifacts to the GitHub release
        uses: softprops/action-gh-release@v3
        with:
          files: |
            ./dist/*.whl
            ./dist/*.tar.gz
  publish:
    name: Publish to PyPI
    runs-on: ubuntu-latest
    needs: [build, github-release]
    environment: pypi
    steps:
      - name: Download artifact
        uses: actions/download-artifact@v8
        with:
          name: dist
          path: dist/
      - name: Publish package to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1