python-publish.yml

# This workflow will upload a Python Package using Twine when a release is created

name: Publish Python 🐍 distribution 📦 to PyPI

on:
  push:
    tags:
      - 'v*' # Trigger the workflow on version tags like v1.0, v2.1, etc.

permissions:
  contents: read

jobs:
  build:
    name: Build distribution 📦
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4
    - name: Set up Python
      uses: actions/setup-python@v5
      with:
        python-version: "3.11"
    
    - name: Install Poetry
      run: |
        curl -sSL https://install.python-poetry.org | python3 - && \
        export PATH="$HOME/.local/bin:$PATH"
    
    - name: Install dependencies
      run: poetry install

    - name: Update version in pyproject.toml
      run: python src/evaluix/update_version.py

    - name: Build package
      run: poetry build

    - name: Store the distribution packages
      uses: actions/upload-artifact@v4
      with:
        name: python-package-distributions
        path: dist/

  publish-to-pypi:
    name: Publish Python 🐍 distribution 📦 to PyPI
    if: startsWith(github.ref, 'refs/tags/') # Only publish when a new tag is pushed
    needs:
    - build
    runs-on: ubuntu-latest
    environment: 
      name: pypi
      url: https://pypi.org/p/evaluix
    permissions:
      id-token: write # IMPORTANT: mandatory for trusted publishing

    steps:
    - name: Download all the dists
      uses: actions/download-artifact@v4
      with:
        name: python-package-distributions
        path: dist/
    - name: Publish distribution 📦 to PyPI
      uses: pypa/gh-action-pypi-publish@v1
      with:
        user: __token__
        password: ${{ secrets.PYPI_API_TOKEN }}