release.yml

name: Release

on:
  push:
    branches:
      - main
  workflow_dispatch:

jobs:
  build-and-publish:
    if: github.repository_owner == 'pypa'
    runs-on: ubuntu-latest
    permissions:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
    steps:
    - uses: actions/checkout@v3
    - name: Set up Python
      uses: actions/setup-python@v3
      with:
        python-version: '3.x'
        cache: pip
        cache-dependency-path: .github/workflows/release.yml
    - name: Lint
      run: make lint
    - name: Test
      run: make test
    - name: Install build dependencies
      run: pip install -U setuptools wheel build calver
    - name: Build
      run: python -m build .
    - name: Publish
      uses: pypa/gh-action-pypi-publish@release/v1
  release:
    if: github.repository_owner == 'pypa'
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - name: Set up Python
      uses: actions/setup-python@v3
      with:
        python-version: '3.x'
        cache: pip
        cache-dependency-path: .github/workflows/release.yml
    - name: Version
      id: version
      run: echo "::set-output name=version::$(python setup.py --version 2>/dev/null)"
    - name: Tag
      uses: actions/create-release@v1
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      with:
        tag_name: ${{ steps.version.outputs.version }}
        release_name: ${{ steps.version.outputs.version }}
        draft: false
        prerelease: false