okmain/.github/workflows/python-release.yml at main · si14/okmain · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
#file: noinspection SpellCheckingInspection,GrazieInspection
# This file is autogenerated by maturin v1.11.0
# with
#
#    maturin generate-ci github
#
# and then edited manually:
# - remove unused platforms and targets
# - remove free-threaded wheels (for now anyway)
# - add --locked --compatibility pypi per
#   https://github.com/PyO3/maturin-action?tab=readme-ov-file#hardening-release-pipelines
# - release tags must start with "py"
# - pinned maturin and maturin-action versions
# - trusted publishing per https://www.maturin.rs/distribution.html#using-pypis-trusted-publishing
# - don't build wheels on pushes to main to save a bit of compute
# - remove sccache
name: python-release

on:
  push:
    # branches:
    #   - main
    tags:
      - 'py-*'
  workflow_dispatch:

permissions:
  contents: read
  id-token: write

jobs:
  run-lint-test:
    uses: ./.github/workflows/lint-test.yml

  linux:
    runs-on: ${{ matrix.platform.runner }}
    needs: run-lint-test
    strategy:
      matrix:
        platform:
          - runner: ubuntu-22.04
            target: x86_64
          - runner: ubuntu-22.04
            target: aarch64
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v6
        with:
          python-version: 3.12
      - name: Build wheels
        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad  # v1.50.1
        with:
          maturin-version: "v1.12.6"
          working-directory: python
          target: ${{ matrix.platform.target }}
          args: --release --locked --compatibility pypi --out dist --interpreter python3.12
          manylinux: 2_28
      - name: Upload wheels
        uses: actions/upload-artifact@v5
        with:
          name: wheels-linux-${{ matrix.platform.target }}
          path: python/dist
          if-no-files-found: error

  musllinux:
    runs-on: ${{ matrix.platform.runner }}
    needs: run-lint-test
    strategy:
      matrix:
        platform:
          - runner: ubuntu-22.04
            target: x86_64
          - runner: ubuntu-22.04
            target: aarch64
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v6
        with:
          python-version: 3.12
      - name: Build wheels
        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad  # v1.50.1
        with:
          maturin-version: "v1.12.6"
          working-directory: python
          target: ${{ matrix.platform.target }}
          args: --release --locked --compatibility pypi --out dist --interpreter python3.12
          manylinux: musllinux_1_2
      - name: Upload wheels
        uses: actions/upload-artifact@v5
        with:
          name: wheels-musllinux-${{ matrix.platform.target }}
          path: python/dist
          if-no-files-found: error

  macos:
    runs-on: ${{ matrix.platform.runner }}
    needs: run-lint-test
    strategy:
      matrix:
        platform:
          - runner: macos-15-intel
            target: x86_64
          - runner: macos-latest
            target: aarch64
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v6
        with:
          python-version: 3.12
      - name: Build wheels
        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad  # v1.50.1
        with:
          maturin-version: "v1.12.6"
          working-directory: python
          target: ${{ matrix.platform.target }}
          args: --release --locked --compatibility pypi --out dist --interpreter python3.12
      - name: Upload wheels
        uses: actions/upload-artifact@v5
        with:
          name: wheels-macos-${{ matrix.platform.target }}
          path: python/dist
          if-no-files-found: error

  sdist:
    runs-on: ubuntu-latest
    needs: run-lint-test
    steps:
      - uses: actions/checkout@v6
      - name: Build sdist
        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad  # v1.50.1
        with:
          maturin-version: "v1.12.6"
          working-directory: python
          command: sdist
          args: --out dist
      - name: Upload sdist
        uses: actions/upload-artifact@v5
        with:
          name: wheels-sdist
          path: python/dist
          if-no-files-found: error

  release:
    name: Release
    runs-on: ubuntu-latest
    if: ${{ startsWith(github.ref, 'refs/tags/py') || github.event_name == 'workflow_dispatch' }}
    needs: [ run-lint-test, linux, musllinux, macos, sdist ]
    permissions:
      # Use to sign the release artifacts
      id-token: write
      # Used to upload release artifacts
      contents: write
      # Used to generate artifact attestation
      attestations: write
    steps:
      - uses: actions/download-artifact@v6
      - name: Generate artifact attestation
        uses: actions/attest-build-provenance@v3
        with:
          subject-path: 'wheels-*/*'
      - name: Install uv
        if: ${{ startsWith(github.ref, 'refs/tags/py') }}
        uses: astral-sh/setup-uv@v7
      - name: Publish to PyPI
        if: ${{ startsWith(github.ref, 'refs/tags/py') }}
        run: uv publish 'wheels-*/*'