release.yml

name: release

on:
  release:
    types:
      - published

env:
  DEFAULT_PYTHON: "3.11"

jobs:
  release:
    name: Build and publish Python package to PyPI and TestPyPI
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
    steps:
    - uses: actions/checkout@master
    - name: 🏗 Set up Poetry
      run: pipx install poetry
    - name: Set up Python ${{ env.DEFAULT_PYTHON }}
      uses: actions/setup-python@v3
      with:
        python-version: ${{ env.DEFAULT_PYTHON }}
        cache: "poetry"
    - name: 🏗 Install workflow dependencies
      run: |
        poetry config virtualenvs.create true
        poetry config virtualenvs.in-project true
    - name: 🏗 Install dependencies
      run: poetry install --no-interaction
    - name: 🏗 Set package version
      run: |
        version="${{ github.event.release.tag_name }}"
        version="${version,,}"
        version="${version#v}"
        poetry version --no-interaction "${version}"
    - name: 🏗 Build package
      run: poetry build --no-interaction
    - name: 🚀 Publish to PyPi
      uses: pypa/gh-action-pypi-publish@v1.9.0
      with:
        verbose: true
        print-hash: true
    - name: ✍️ Sign published artifacts
      uses: sigstore/gh-action-sigstore-python@v3.0.0
      with:
        inputs: ./dist/*.tar.gz ./dist/*.whl
        release-signing-artifacts: true