publish-python.yml

name: publish-python

on:
  workflow_dispatch:

concurrency:
  group: publish-python-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: read

env:
  DOTNET_NOLOGO: true
  DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
  DOTNET_CLI_TELEMETRY_OPTOUT: 1

jobs:
  build:
    name: Build Python package
    runs-on: ubuntu-24.04

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Setup .NET
        uses: actions/setup-dotnet@v5
        with:
          global-json-file: global.json
          cache: true
          cache-dependency-path: |
            StemCode/packages.lock.json

      - name: Setup Python
        uses: actions/setup-python@v6
        with:
          python-version: "3.12"
          cache: pip
          cache-dependency-path: python/pyproject.toml

      - name: Install package tools
        run: python -m pip install --upgrade build twine

      - name: Build wheel and source distribution
        working-directory: python
        run: python -m build

      - name: Check distributions
        working-directory: python
        run: python -m twine check dist/*

      - name: Upload distributions
        uses: actions/upload-artifact@v6
        with:
          name: python-distributions
          path: python/dist/*
          if-no-files-found: error
          retention-days: 14

  publish:
    name: Publish to PyPI
    needs: build
    runs-on: ubuntu-24.04
    environment:
      name: production-release
      url: https://pypi.org/p/stemcode-sdk
    permissions:
      id-token: write

    steps:
      - name: Download distributions
        uses: actions/download-artifact@v6
        with:
          name: python-distributions
          path: dist

      - name: Publish distributions to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1