python-app.yml

name: test and publish

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]
  release:
    types: [published]

permissions:
  contents: read

jobs:
  test:
    name: Test
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: astral-sh/setup-uv@v3
    - name: Set up Python
      run: |
        uv python install
        uv venv
        source .venv/bin/activate
        echo PATH=$PATH >> $GITHUB_ENV
    - name: Install package
      run: |
        uv pip install .[dev]
    - name: Check lint
      run: |
        codespell .
        ruff check .
        ruff format . --diff
    - name: Test
      run: |
        coverage run -m pytest tests/unit/
        coverage report

  publish:
    name: Publish
    environment:
      name: pypi
      url: https://pypi.org/project/dot.py/
    permissions:
      id-token: write
    runs-on: ubuntu-latest
    needs: test
    if: startsWith(github.ref, 'refs/tags/v')
    steps:
    - uses: actions/checkout@v4
      with:
        fetch-depth: 0  # needed to get version
    - uses: astral-sh/setup-uv@v3
    - name: Build
      run: |
        uv build
    - name: Set up Python
      run: |
        uv python install
        uv venv
        source .venv/bin/activate
        echo PATH=$PATH >> $GITHUB_ENV
    - name: Validate Tag
      run: |
        uv pip install dist/*.whl
        python3 tests/version.py
    - name: Publish
      run: |
        uv publish --trusted-publishing always