python-release.yml

name: Python Release

on:
  push:
    tags:
      - python-v*
  workflow_dispatch:

defaults:
  run:
    shell: bash

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  PACKAGE_NAME: jsonschema_rs
  PYTHON_ABI_VERSION: "3.10"
  PYPY_VERSION: "pypy3.11"
  PYODIDE_RUST_TOOLCHAIN: "nightly-2025-06-27"

jobs:
  sdist:
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2

      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0

      - run: uv python install "3.12"

      - run: uv build --sdist --out-dir dist
        working-directory: crates/jsonschema-py

      - run: uv venv
        working-directory: crates/jsonschema-py

      - name: Install sdist
        run: |
          uv pip install dist/${{ env.PACKAGE_NAME }}-*.tar.gz --force-reinstall
        working-directory: crates/jsonschema-py

      - name: Upload sdist
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: sdist
          path: crates/jsonschema-py/dist

  macos:
    runs-on: macos-15
    strategy:
      fail-fast: false
      matrix:
        target: [x86_64, aarch64]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - name: Install Python
        run: uv python install ${{ env.PYTHON_ABI_VERSION }}
      - uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}-apple-darwin
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ env.PYTHON_ABI_VERSION }}
      - name: Install built wheel
        run: |
          uv venv --python ${{ env.PYTHON_ABI_VERSION }}
          uv pip install dist/${{ env.PACKAGE_NAME }}-*.whl --force-reinstall
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-macos-${{ matrix.target }}
          path: dist

  windows:
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - label: x64
            os: windows-2025
            target: x64
            architecture: x64
          - label: x86
            os: windows-2025
            target: x86
            architecture: x86
          # CPython does not have a Windows ARM64 release before 3.11.
          - label: arm64
            os: windows-11-arm
            target: aarch64-pc-windows-msvc
            architecture: arm64
            python: "3.11"
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        id: python
        with:
          python-version: ${{ matrix.python || env.PYTHON_ABI_VERSION }}
          architecture: ${{ matrix.architecture }}
      - uses: dtolnay/rust-toolchain@stable
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ steps.python.outputs.python-path }}
      - name: Install built wheel
        shell: bash
        run: |
          uv venv --python '${{ steps.python.outputs.python-path }}'
          uv pip install dist/${{ env.PACKAGE_NAME }}-*.whl --force-reinstall
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-windows-${{ matrix.label }}
          path: dist

  linux:
    runs-on: ubuntu-24.04
    strategy:
      matrix:
        include:
          - target: x86_64
            manylinux: auto
          - target: i686
            manylinux: auto
          - target: aarch64
            manylinux: 2_28
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: ${{ env.PYTHON_ABI_VERSION }}
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          manylinux: ${{ matrix.manylinux }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ env.PYTHON_ABI_VERSION }}
      - name: Install built wheel on native architecture
        if: matrix.target == 'x86_64'
        run: |
          uv venv --python ${{ env.PYTHON_ABI_VERSION }}
          uv pip install dist/${{ env.PACKAGE_NAME }}-*.whl --force-reinstall
      - uses: uraimo/run-on-arch-action@fa1f3e7de95534497266c7265950b5188355fbfb # v3.2.1
        if: matrix.target == 'aarch64'
        name: Install built wheel on ARM architecture
        with:
          base_image: '--platform=linux/aarch64 ubuntu:24.04'
          githubToken: ${{ github.token }}
          install: |
            export TZ=UTC
            export DEBIAN_FRONTEND=noninteractive
            apt-get update
            apt-get install -y --no-install-recommends software-properties-common gpg gpg-agent curl
            add-apt-repository ppa:deadsnakes/ppa
            apt-get update
            apt-get install -y python${{ env.PYTHON_ABI_VERSION }}-dev python${{ env.PYTHON_ABI_VERSION }}-venv
          run: |
            python${{ env.PYTHON_ABI_VERSION }} -m venv venv
            venv/bin/pip install -U pip wheel
            venv/bin/pip install ${{ env.PACKAGE_NAME }} --no-index --find-links dist/ --force-reinstall
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-linux-${{ matrix.target }}
          path: dist

  linux-musllinux:
    runs-on: ubuntu-24.04
    strategy:
      matrix:
        include:
          - target: x86_64
            arch: amd64
          - target: aarch64
            arch: aarch64
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: ${{ env.PYTHON_ABI_VERSION }}
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          manylinux: musllinux_1_2
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ env.PYTHON_ABI_VERSION }}
      - uses: uraimo/run-on-arch-action@fa1f3e7de95534497266c7265950b5188355fbfb # v3.2.1
        name: Install built wheel on Alpine
        with:
          base_image: '--platform=linux/${{ matrix.arch }} python:${{ env.PYTHON_ABI_VERSION }}-alpine'
          githubToken: ${{ github.token }}
          shell: /bin/sh
          install: apk add --no-cache py3-pip
          run: pip install ${{ env.PACKAGE_NAME }} --no-index --find-links dist/ --force-reinstall --break-system-packages
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-linux-musllinux-${{ matrix.target }}
          path: dist

  linux-freethreaded:
    runs-on: ubuntu-24.04
    strategy:
      fail-fast: false
      matrix:
        python_version: ["3.14t", "3.15t"]
        target: [x86_64, aarch64]
        include:
          - target: x86_64
            manylinux: auto
          - target: aarch64
            manylinux: 2_28
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: '3.13'
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          manylinux: ${{ matrix.manylinux }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ matrix.python_version }}
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-linux-freethreaded-${{ matrix.python_version }}-${{ matrix.target }}
          path: dist

  linux-musllinux-freethreaded:
    runs-on: ubuntu-24.04
    strategy:
      fail-fast: false
      matrix:
        python_version: ["3.14t", "3.15t"]
        target: [x86_64, aarch64]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: '3.13'
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          manylinux: musllinux_1_2
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ matrix.python_version }}
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-linux-musllinux-freethreaded-${{ matrix.python_version }}-${{ matrix.target }}
          path: dist

  macos-freethreaded:
    runs-on: macos-15
    strategy:
      fail-fast: false
      matrix:
        python_version: ["3.14t", "3.15t"]
        target: [x86_64, aarch64]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - name: Install Python
        run: uv python install ${{ matrix.python_version }}
      - uses: dtolnay/rust-toolchain@stable
        with:
          targets: x86_64-apple-darwin,aarch64-apple-darwin
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ matrix.python_version }}
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-macos-freethreaded-${{ matrix.python_version }}-${{ matrix.target }}
          path: dist

  windows-freethreaded:
    runs-on: ${{ matrix.platform.os }}
    strategy:
      fail-fast: false
      matrix:
        python_version: ["3.14t", "3.15t"]
        platform:
          - os: windows-2025
            target: x64
            label: x64
          - os: windows-11-arm
            target: aarch64-pc-windows-msvc
            label: arm64
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        id: python
        with:
          python-version: ${{ matrix.python_version }}
          allow-prereleases: true
      - uses: dtolnay/rust-toolchain@stable
      - name: Build wheels
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.platform.target }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ steps.python.outputs.python-path }}
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-windows-freethreaded-${{ matrix.python_version }}-${{ matrix.platform.label }}
          path: dist

  pypy:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
          - os: macos-15
            target: x86_64
            artifact: wheel-macos-pypy
            manylinux: ''
          - os: windows-2025
            target: x64
            artifact: wheel-windows-pypy
            manylinux: ''
          - os: ubuntu-24.04
            target: x86_64
            artifact: wheel-linux-pypy
            manylinux: auto
          - os: ubuntu-24.04
            target: aarch64
            artifact: wheel-linux-pypy-aarch64
            manylinux: 2_28

    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: ${{ env.PYPY_VERSION }}
      - name: Get Python path
        shell: bash
        run: |
          if [[ "$RUNNER_OS" == "Windows" ]]; then
            python_path=$(python -c "import sys; print(sys.executable)")
          else
            python_path=$(which python || which python3)
          fi
          echo "PYTHON_PATH=$python_path" >> "$GITHUB_ENV"
          "$python_path" --version
      - uses: dtolnay/rust-toolchain@stable
      - name: Add macOS x86_64 target
        if: runner.os == 'macOS'
        run: rustup target add x86_64-apple-darwin
      - name: Build wheels - PyPy (manylinux)
        if: ${{ matrix.manylinux != '' }}
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          manylinux: ${{ matrix.manylinux }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ env.PYPY_VERSION }}
      - name: Build wheels - PyPy
        if: ${{ matrix.manylinux == '' }}
        uses: messense/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
        with:
          target: ${{ matrix.target }}
          args: --release -m crates/jsonschema-py/Cargo.toml --out dist --interpreter ${{ env.PYTHON_PATH }}
      - name: Install built wheel - PyPy
        if: ${{ matrix.target != 'aarch64' }}
        run: |
          uv venv --python ${{ env.PYPY_VERSION }}
          uv pip install dist/${{ env.PACKAGE_NAME }}-*.whl --force-reinstall
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: ${{ matrix.artifact }}
          path: dist

  pyodide:
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: dtolnay/rust-toolchain@nightly
        with:
          # nightly-2025-06-27 = rustc 1.90-nightly; pinned to a nightly with a prebuilt pyodide emscripten sysroot
          toolchain: ${{ env.PYODIDE_RUST_TOOLCHAIN }}
          components: rust-src
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: "3.13"
      - run: |
          pip install "pyodide-build>=0.28.0"
          echo EMSCRIPTEN_VERSION=$(pyodide config get emscripten_version) >> $GITHUB_ENV
      - uses: mymindstorm/setup-emsdk@4528d102f7230f0e7b276855c01ea1159be0e984 # v16
        with:
          version: ${{ env.EMSCRIPTEN_VERSION }}
      - name: Install Pyodide Rust sysroot
        run: |
          toolchain_root=$(rustup run "${{ env.PYODIDE_RUST_TOOLCHAIN }}" rustc --print sysroot)
          rustlib="$toolchain_root/lib/rustlib"
          sysroot_tag="emcc-${EMSCRIPTEN_VERSION}_${{ env.PYODIDE_RUST_TOOLCHAIN }}"
          curl -fsSL --retry 5 --retry-all-errors \
            -o "/tmp/${sysroot_tag}.tar.bz2" \
            "https://github.com/pyodide/rust-emscripten-wasm-eh-sysroot/releases/download/${sysroot_tag}/${sysroot_tag}.tar.bz2"
          tar -xjf "/tmp/${sysroot_tag}.tar.bz2" --directory="$rustlib"
      - run: pyodide build
        working-directory: crates/jsonschema-py
        env:
          RUSTUP_TOOLCHAIN: ${{ env.PYODIDE_RUST_TOOLCHAIN }}
          RUSTFLAGS: "-C link-arg=-sSIDE_MODULE=2 -Z link-native-libraries=no -Z emscripten-wasm-eh"
      - name: Upload wheels
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: wheel-pyodide
          if-no-files-found: error
          path: crates/jsonschema-py/dist

  release:
    name: Release
    runs-on: ubuntu-24.04
    needs:
      - sdist
      - macos
      - windows
      - linux
      - linux-musllinux
      - linux-freethreaded
      - linux-musllinux-freethreaded
      - macos-freethreaded
      - windows-freethreaded
      - pypy
      - pyodide
    if: "startsWith(github.ref, 'refs/tags/')"
    permissions:
      contents: write
    steps:
      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          path: all
      - name: Separate pyodide wheel from the rest
        run: |
          mkdir dist dist-pyodide
          for dir in all/*/; do
            if [[ "$dir" == *"pyodide"* ]]; then
              cp "$dir"* dist-pyodide/
            else
              cp "$dir"* dist/
            fi
          done
      - name: Publish distribution package to PyPI
        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
        with:
          password: ${{ secrets.PYPI_API_TOKEN }}

      - name: Extract Version
        run: echo "version=${GITHUB_REF#refs/tags/python-v}" >> $GITHUB_ENV

      - name: Create GitHub Release
        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
        with:
          make_latest: false
          draft: true
          name: "[Python] Release ${{ env.version }}"
          files: |
            dist/*
            dist-pyodide/*