release.yml

name: Release

on:
  push:
    branches:
      - master

jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
    outputs:
      release_created: ${{ steps.release.outputs.release_created }}
    steps:
      - uses: googleapis/release-please-action@v4
        id: release
        with:
          release-type: python

      - uses: actions/checkout@v4
        if: ${{ steps.release.outputs.release_created }}
        with:
          fetch-depth: 2

      - name: Set up Python
        if: ${{ steps.release.outputs.release_created }}
        uses: actions/setup-python@v4
        with:
          python-version: '3.8'  # keep in sync with dev-env.yml

      - name: Upgrade pip
        if: ${{ steps.release.outputs.release_created }}
        run: |
          pip install --upgrade pip
          pip --version

      - name: Install Poetry
        if: ${{ steps.release.outputs.release_created }}
        run: |
          pip install 'poetry==1.8.3' # keep version in sync with dev-env.yml
          poetry --version

      - name: Build package
        if: ${{ steps.release.outputs.release_created }}
        run: |
          poetry build --ansi -n

      - uses: actions/upload-artifact@v4
        if: ${{ steps.release.outputs.release_created }}
        with:
          name: dist
          path: dist/

  upload_pypi:
    needs: release
    runs-on: ubuntu-latest
    if: ${{ needs.release.outputs.release_created }}
    environment: release
    permissions:
      # IMPORTANT: this permission is mandatory for trusted publishing
      id-token: write
    steps:
      - name: Get artifacts
        uses: actions/download-artifact@v4
        with:
          merge-multiple: true
          path: dist

      - name: Publish package on PyPI
        uses: pypa/gh-action-pypi-publish@v1.8.14