lemur-publish-release-pypi.yml

# This workflow will upload a Python Package to PyPI when a Lemur release is created via github
# For more information see: https://github.com/marketplace/actions/pypi-publish

name: Publish Lemur's latest package to PyPI

on:
  release:
    types: [created]

jobs:
  build:
    name: Build distribution
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.x'
      - name: Autobump version
        run: |
          # from refs/tags/v0.8.1 get 0.8.1
          VERSION=$(echo $GITHUB_REF | sed 's#.*/v##')
          PLACEHOLDER='^__version__ =.*'
          VERSION_FILE='lemur/__about__.py'
          # in case placeholder is missing, exists with code 1 and github actions aborts the build
          grep "$PLACEHOLDER" "$VERSION_FILE"
          sed -i "s/$PLACEHOLDER/__version__ = \"${VERSION}\"/g" "$VERSION_FILE"
        shell: bash
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install setuptools wheel
      - name: Build package
        run: |
          python setup.py sdist bdist_wheel
      - name: Store the distribution packages
        uses: actions/upload-artifact@v4
        with:
          name: python-package-distributions
          path: dist/
  pypi-publish:
    name: upload release to PyPI
    runs-on: ubuntu-latest
    needs: build # wait for the build job to complete
    environment:
      name: release
      url: https://pypi.org/p/lemur
    permissions:
      # https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-pypi
      id-token: write
    steps:
      - name: Download all the dists
        uses: actions/download-artifact@v4
        with:
          name: python-package-distributions
          path: dist/
      - name: Publish package distributions to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1