streaming-data-types/.github/workflows/release.yml at master · ISISComputingGroup/streaming-data-types · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
name: Publish
on: push
jobs:
  py-build:
    if: github.ref_type == 'tag'
    name: build distribution
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v6
    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: "3.13"
    - name: Install pypa/build
      run: >-
        python3 -m
        pip install
        build
        --user
    - name: Build a binary wheel and a source tarball
      run: python3 -m build
      working-directory: python
    - name: Store the distribution packages
      uses: actions/upload-artifact@v7
      with:
        name: python-package-distributions
        path: python/dist/
  rust-build:
    if: github.ref_type == 'tag'
    name: build distribution
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v6
      - name: install stable rust
        run: rustup install stable
      - name: Format check
        run: cargo fmt --check
        working-directory: rust
      - name: Clippy
        run: cargo clippy -- --deny warnings
        working-directory: rust
      - name: Tests
        run: cargo test
        working-directory: rust
      - name: set version
        run: |
          export VERSION=${{ github.ref_name }}
          sed -i "s/0.0.0/$VERSION/g" Cargo.toml
        working-directory: rust
      - name: publish
        run: cargo publish --dry-run --allow-dirty
        env:
          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
        working-directory: rust

  publish-to-pypi:
    name: >-
      Publish Python distribution to PyPI
    if: github.ref_type == 'tag'
    needs: [py-build, rust-build]  # Don't publish anything until both python & rust builds pass...
    runs-on: ubuntu-latest
    environment:
      name: release
      url: https://pypi.org/p/isis-streaming-data-types
    permissions:
      id-token: write  # IMPORTANT: mandatory for trusted publishing
    steps:
    - name: Download all the dists
      uses: actions/download-artifact@v8
      with:
        name: python-package-distributions
        path: python/dist/
    - name: Publish distribution to PyPI
      uses: pypa/gh-action-pypi-publish@release/v1
      with:
        packages-dir: python/dist/

  publish-to-crates-io:
    name: >-
      Publish Rust distribution to crates.io
    runs-on: ubuntu-latest
    if: github.ref_type == 'tag'
    needs: [py-build, rust-build]  # Don't publish anything until both python & rust builds pass...
    steps:
    - uses: actions/checkout@v6
    - name: install stable rust
      run: rustup install stable
    - name: set version
      run: |
        export VERSION=${{ github.ref_name }}
        sed -i "s/0.0.0/$VERSION/g" Cargo.toml
      working-directory: rust
    - name: publish
      run: cargo publish --allow-dirty
      env:
        CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
      working-directory: rust

  github-release:
    name: >-
      Sign the Python distribution with Sigstore
      and upload them to GitHub Release
    needs: [py-build, publish-to-pypi, rust-build, publish-to-crates-io]
    runs-on: ubuntu-latest

    permissions:
      contents: write  # IMPORTANT: mandatory for making GitHub Releases
      id-token: write  # IMPORTANT: mandatory for sigstore

    steps:
    - name: Download all the dists
      uses: actions/download-artifact@v8
      with:
        name: python-package-distributions
        path: python/dist/
    - name: Sign the dists with Sigstore
      uses: sigstore/gh-action-sigstore-python@v3.3.0
      with:
        inputs: >-
          ./python/dist/*.tar.gz
          ./python/dist/*.whl
    - name: Create GitHub Release
      env:
        GITHUB_TOKEN: ${{ github.token }}
      run: >-
        gh release create
        '${{ github.ref_name }}'
        --repo '${{ github.repository }}'
        --notes ""
    - name: Upload artifact signatures to GitHub Release
      env:
        GITHUB_TOKEN: ${{ github.token }}
      # Upload to GitHub Release using the `gh` CLI.
      # `dist/` contains the built packages, and the
      # sigstore-produced signatures and certificates.
      run: >-
        gh release upload
        '${{ github.ref_name }}' python/dist/**
        --repo '${{ github.repository }}'