python-pyinstaller.yml

---
name: Build using PyInstaller
on:
  workflow_call:
    inputs:
      app-script-path:
        required: true
        type: string
        description: Path to a Python script
      python-version:
        required: false
        type: string
        description: Python version to use (not applicable if uv.lock is present)
        default: 3.x
      uv-version:
        required: false
        type: string
        description: Version of uv to use (applicable only if uv.lock is present)
        default: latest
      requirements-txt:
        required: false
        type: string
        description: Path to the requirements.txt file (not applicable if uv.lock is present)
        default: null
      artifact-name:
        required: false
        type: string
        description: Name of the artifact
        default: dist
      artifact-path:
        required: false
        type: string
        description: Path to the artifact
        default: dist
      artifact-retention-days:
        required: false
        type: number
        description: Number of days to retain artifacts
        default: 1
      artifact-overwrite:
        required: false
        type: boolean
        description: Overwrite existing artifacts
        default: true
      runs-on:
        required: false
        type: string
        description: Type of machine to run the job on
        default: windows-latest
permissions:
  contents: read
defaults:
  run:
    shell: bash -euo pipefail {0}
    working-directory: .
jobs:
  bundle:
    runs-on: ${{ inputs.runs-on }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
        with:
          fetch-depth: 1
          persist-credentials: false
      - name: Detect uv.lock or poetry.lock
        run: |
          if [[ -f uv.lock ]]; then
            echo "LOCK_FILE=uv.lock" >> "${GITHUB_ENV}"
          elif [[ -f poetry.lock ]]; then
            echo "LOCK_FILE=poetry.lock" >> "${GITHUB_ENV}"
          else
            echo "LOCK_FILE=" >> "${GITHUB_ENV}"
          fi
      - name: Set up uv
        if: env.LOCK_FILE == 'uv.lock'
        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57  # v8.0.0
        with:
          version: ${{ inputs.uv-version }}
      - name: Install packages using uv
        if: env.LOCK_FILE == 'uv.lock'
        run: |
          uv sync --all-groups
          uv add --dev PyInstaller
          tee -a "${GITHUB_ENV}" <<< "EXECUTOR=uv run"
      - name: Set up Python
        if: env.LOCK_FILE != 'uv.lock'
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
        with:
          python-version: ${{ inputs.python-version }}
      - name: Install packages
        if: env.LOCK_FILE != 'uv.lock'
        env:
          REQUIREMENTS_TXT_PATH: ${{ inputs.requirements-txt }}
        run: |
          if [[ "${LOCK_FILE}" == "poetry.lock" ]]; then
            python -m pip install --no-cache-dir poetry
            poetry lock --no-interaction
            poetry add --group=dev --no-interaction PyInstaller
            poetry install --no-interaction
            tee -a "${GITHUB_ENV}" <<< "EXECUTOR=poetry run"
          else
            python -m pip install -U --no-cache-dir pip
            if [[ -n "${REQUIREMENTS_TXT_PATH}" ]]; then
              python -m pip install -U --no-cache-dir -r "${REQUIREMENTS_TXT_PATH}"
            fi
            python -m pip install --no-cache-dir PyInstaller
            tee -a "${GITHUB_ENV}" <<< "EXECUTOR=python -m"
          fi
      - name: Build an executable file
        env:
          APP_SCRIPT_PATH: ${{ inputs.app-script-path }}
        run: >  # zizmor: ignore[template-injection]
          ${{ env.EXECUTOR }} PyInstaller --clean --noconsole --onefile "${APP_SCRIPT_PATH}"
      - name: Upload the artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
        with:
          name: ${{ inputs.artifact-name }}
          path: ${{ inputs.artifact-path }}
          retention-days: ${{ inputs.artifact-retention-days }}
          overwrite: ${{ inputs.artifact-overwrite }}