Nightly PyPI Publish #153
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Nightly PyPI Publish | |
| on: | |
| schedule: | |
| - cron: "8 7 * * *" # 07:08 UTC daily | |
| workflow_dispatch: {} # allow manual runs (no publish) | |
| push: | |
| tags: | |
| - "v*" | |
| - "*.*.*" | |
| permissions: | |
| contents: read | |
| id-token: write # Required for Trusted Publishing (OIDC) | |
| jobs: | |
| build-and-publish: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 # setuptools-scm requires full history/tags | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.11" | |
| - name: Check for new commits since last nightly | |
| id: check | |
| if: github.ref_type != 'tag' | |
| run: bash .github/scripts/check_new_commits.sh | |
| - name: Compute nightly version from latest tag (next patch + timestamp) | |
| id: ver | |
| if: github.ref_type != 'tag' && steps.check.outputs.should_publish != 'false' | |
| run: | | |
| # Get latest tag; allow 'v' prefix; fail if none | |
| if ! TAG=$(git describe --tags --abbrev=0 2>/dev/null); then | |
| echo "::error title=No git tag found::Repository has no tags. Add a semver tag like v0.1.0" | |
| exit 1 | |
| fi | |
| BASE=${TAG#v} | |
| # Keep only X.Y.Z form (strip rc/a/b/post/dev suffixes) | |
| BASE=$(printf "%s\n" "$BASE" | sed -E 's/^([0-9]+)\.([0-9]+)\.([0-9]+).*/\1.\2.\3/') | |
| IFS='.' read -r MAJ MIN PAT <<EOF | |
| $BASE | |
| EOF | |
| # Use next patch version as the nightly base | |
| PAT=$((PAT + 1)) | |
| NEXT="$MAJ.$MIN.$PAT" | |
| DATE=$(date -u +%Y%m%d%H%M%S) | |
| echo "NVER=${NEXT}.dev${DATE}" >> "$GITHUB_OUTPUT" | |
| echo "Computed nightly version: ${NEXT}.dev${DATE}" | |
| - name: Build sdist/wheel | |
| if: github.ref_type == 'tag' || steps.check.outputs.should_publish != 'false' | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install build setuptools-scm | |
| if [ "${{ github.ref_type }}" != "tag" ]; then | |
| export SETUPTOOLS_SCM_PRETEND_VERSION=${{ steps.ver.outputs.NVER }} | |
| fi | |
| python -m build | |
| - name: Check metadata | |
| if: github.ref_type == 'tag' || steps.check.outputs.should_publish != 'false' | |
| run: | | |
| pip install twine | |
| twine check dist/* | |
| - name: Publish to PyPI (Trusted Publishing) | |
| if: (github.event_name == 'schedule' || github.ref_type == 'tag') && steps.check.outputs.should_publish != 'false' | |
| uses: pypa/gh-action-pypi-publish@release/v1 | |
| with: | |
| attestations: true | |
| skip-existing: true |