build.yml

name: build

on: [push]

jobs:
  lint:
    name: Lint
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
    - uses: actions/checkout@v4
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: "3.10"
    - name: Lint code
      run: |
        make setup
        make check

  deploy:
    name: Deploy on PyPI
    needs: lint
    if: >
      github.event_name == 'push' &&
      startsWith(github.ref, 'refs/tags') &&
      github.base_ref == 'main' &&
      github.actor == github.repository_owner
    runs-on: ubuntu-latest
    timeout-minutes: 10
    environment:
      name: pypi
      url: https://pypi.org/p/lymbo
    permissions:
      id-token: write  # IMPORTANT: mandatory for trusted publishing 
    steps:
    - uses: actions/checkout@v4
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: 3.11
    - name: Install pypa/build
      run: |
        python -m pip install --upgrade pip
        python -m pip install --upgrade setuptools wheel
        python -m pip install build --user
    - name: Build a binary wheel and a source tarball
      run: python3 -m build
    - name: Store the distribution packages
      if: >
        github.event_name == 'push' &&
        startsWith(github.ref, 'refs/tags') &&
        github.base_ref == 'main' &&
        github.actor == github.repository_owner
      uses: actions/upload-artifact@v4
      with:
        name: python-package-distributions
        path: dist/
    - name: Publish package on Pypi
      if: >
        github.event_name == 'push' &&
        startsWith(github.ref, 'refs/tags') &&
        github.base_ref == 'main' &&
        github.actor == github.repository_owner
      uses: pypa/gh-action-pypi-publish@release/v1