ci: automate releases (release-please + PyPI publish)

Author: smkc

.github/workflows/publish-pypi.yml

@@ -33,6 +33,25 @@ jobs:
           python -m pip install -r requirements-dev.txt
           python -m pip install build twine
 
+      - name: Verify version matches tag
+        run: |
+          python - << 'PY'
+          import tomllib
+          from pathlib import Path
+
+          tag = "${{ github.ref_name }}"
+          if tag.startswith("v"):
+              tag = tag[1:]
+
+          data = tomllib.loads(Path("pyproject.toml").read_text(encoding="utf-8"))
+          version = data["project"]["version"]
+          if version != tag:
+              raise SystemExit(
+                  f"pyproject.toml version ({version}) does not match tag ({tag})"
+              )
+          print(f"OK: {version} == {tag}")
+          PY
+
       - name: Lint and typecheck
         run: |
           python tools/lint.py --strict

.github/workflows/release-please.yml

@@ -0,0 +1,20 @@
+name: Release Please
+
+on:
+  push:
+    branches: ["main"]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          config-file: .release-please-config.json
+          manifest-file: .release-please-manifest.json

.release-please-config.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "release-type": "python",
+  "include-v-in-tag": true,
+  "include-component-in-tag": false,
+  "packages": {
+    ".": {
+      "package-name": "ksef-client",
+      "extra-files": ["pyproject.toml"]
+    }
+  }
+}
+

.release-please-manifest.json

@@ -0,0 +1,4 @@
+{
+  ".": "0.2.0"
+}
+