check-and-publish.yaml

name: Check and Publish

on:
  pull_request:
  push:
  schedule:
    - cron: '22 15 * * 3'
  workflow_dispatch:

jobs:
  codespell:
    name: Codespell
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: make qa-codespell

  pytest:
    name: Python Test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: make qa-pytest

  ruff:
    name: Python Format and Lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: make qa-ruff

  build:
    name: Python Build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          # include tags and full history for setuptools_scm
          fetch-depth: 0
      - run: make build
      - uses: actions/upload-artifact@v4
        with:
          name: dist
          path: dist

  publish-test:
    name: Publish to test.pypi.org
    if: ${{ github.event_name == 'push' && vars.PUBLISH_PYPI == 'true' && (startsWith(github.ref, 'refs/tags') || github.ref == 'refs/heads/master') }}
    runs-on: ubuntu-latest
    needs:
      - codespell
      - pytest
      - ruff
      - build
    permissions:
      id-token: write
    steps:
      - name: Download artifacts from build stage
        uses: actions/download-artifact@v4
        with:
          name: dist
          path: dist/
      - name: Publish distribution package to TestPyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          repository-url: https://test.pypi.org/legacy/

  publish-production:
    name: Publish
    if: ${{ github.event_name == 'push' && vars.PUBLISH_PYPI == 'true' && startsWith(github.ref, 'refs/tags') }}
    runs-on: ubuntu-latest
    needs:
      - codespell
      - pytest
      - ruff
      - build
      - publish-test
    permissions:
      id-token: write
    steps:
      - name: Download artifacts from build stage
        uses: actions/download-artifact@v4
        with:
          name: dist
          path: dist/
      - name: Publish distribution package to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          attestations: false