ci.yml

name: CI

on:
  push:
    branches:
      - "master"
    tags:
      - "v*"
  pull_request:
    branches:
      - "master"

permissions:
  contents: read
  security-events: write

jobs:
  ci:
    name: Check style and run tests
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12.0-rc.1"]
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v2
        if: ${{ matrix.python-version != '3.12.0-rc.1' }}  # remove when codeql is fixed on 3.12
        with:
          languages: python
      - name: Install Poetry
        run: pipx install poetry
      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version: ${{ matrix.python-version }}
          cache: "poetry"
      - name: Setup environment
        run: poetry install
      - name: Style
        run: make style
      - name: Test
        run: make test
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v2
        if: ${{ matrix.python-version != '3.12.0-rc.1' }}  # remove when codeql is fixed on 3.12
      - name: Codecov
        uses: codecov/codecov-action@v3
        with:
          flags: ${{ matrix.python-version }}
  release:
    name: Release on PyPI
    runs-on: ubuntu-latest
    environment: release
    needs: ci
    if: startsWith(github.ref, 'refs/tags/v')
    permissions:
      id-token: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v3
      - name: Install Poetry
        run: pipx install poetry
      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version: "3.11"
          cache: "poetry"
      - name: Setup environment
        run: poetry install
      - name: Build
        run: |
          poetry build
      - name: Publish package distributions to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1