Files
plyngent/.github/workflows/ci.yml
T
NCBM 614ffaaf8f ci: publish only after CI check succeeds
Merge release into ci.yml: tag pushes run check then publish (needs:
check). Remove standalone python-publish so PyPI never ships on red CI.
Retag (delete+push v*) still retriggers the pipeline.
2026-07-20 04:44:57 +08:00

81 lines
1.9 KiB
YAML

# Single pipeline: CI on main/PRs; on v* tags, publish only after CI succeeds.
# Retagging the same commit (delete + push tag) re-triggers this workflow.
name: CI
on:
push:
branches: [main]
tags: ["v*"]
pull_request:
branches: [main]
# Cancel superseded runs on the same ref (e.g. force-push / retag races).
concurrency:
group: ci-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.14"
- name: Install PDM
run: pip install pdm
- name: Install dependencies
# Locked install so CI matches prek pins / pdm.lock.
run: pdm install --check -G :all
- name: Ruff check
run: pdm run ruff check .
- name: Ruff format
run: pdm run ruff format --check .
- name: basedpyright
run: pdm run basedpyright .
- name: Pytest
run: pdm run pytest
# Only on version tags, and only after check is green (no publish on red CI).
publish:
needs: check
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
runs-on: ubuntu-latest
permissions:
contents: write
id-token: write
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.14"
- name: Install PDM
run: pip install pdm
- name: Build package
run: pdm build
- name: Create GitHub Release
uses: softprops/action-gh-release@v2
with:
files: dist/*
generate_release_notes: true
fail_on_unmatched_files: true
- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@release/v1