release.yml

name: Release

# make release: writes cli_progress/VERSION, commits, tags (e.g. 3.0.1) and pushes the tag.
on:
  push:
    tags: ["[0-9]+.[0-9]+.[0-9]+*"]
  workflow_dispatch:

permissions:
  contents: read

jobs:
  checks:
    uses: ./.github/workflows/main.yml

  verify-tag:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: The tag is the version in cli_progress/VERSION
        if: github.ref_type == 'tag'
        run: |
          version="$(tr -d '[:space:]' < cli_progress/VERSION)"
          if [ "$version" != "$GITHUB_REF_NAME" ]; then
            echo "::error::tag $GITHUB_REF_NAME but cli_progress/VERSION is $version"
            exit 1
          fi

  publish:
    needs: [checks, verify-tag]
    if: github.ref_type == 'tag'
    runs-on: ubuntu-latest
    environment: pypi
    steps:
      - uses: actions/download-artifact@v4 # the wheel the checks built and ran
        with:
          name: dist
          path: dist/
      - uses: astral-sh/setup-uv@v6
      - name: Publish to PyPI
        env:
          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
        run: uv publish

  github-release:
    needs: publish
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0 # the commits since the previous tag
      - uses: actions/download-artifact@v4
        with:
          name: dist
          path: dist/
      - name: Release notes
        run: .github/release_message.sh > release_message.md
      - uses: softprops/action-gh-release@v2
        with:
          body_path: release_message.md
          files: dist/*