python-open-source-template/.github/workflows/continuous-deployment.yaml at 6bd88537f19def857eb96242e19cc498fad244c5 · palewire/python-open-source-template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
name: Continuous deployment

on:
  push:
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  lint-python:
    name: Lint Python code
    runs-on: ubuntu-latest
    steps:
      - id: checkout
        name: Checkout
        uses: actions/checkout@v6

      - id: check-ruff
        name: Check with Ruff
        uses: astral-sh/ruff-action@v3
        with:
          args: "check --exit-zero --verbose"

      - id: format-ruff
        name: Format with Ruff
        uses: astral-sh/ruff-action@v3
        with:
          args: "format --check --verbose"

  type-check:
    name: Verify static typing
    runs-on: ubuntu-latest
    steps:
      - id: checkout
        name: Checkout
        uses: actions/checkout@v6

      - name: Setup uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "latest"
          enable-cache: true
          cache-dependency-glob: "**/pyproject.toml"

      - id: install-python-dependencies
        name: Install Python dependencies
        run: uv sync --extra dev --frozen

      - id: type-check
        name: Run type check
        timeout-minutes: 10
        run: uv run ty check

  vulture:
    name: Detect dead code
    runs-on: ubuntu-latest
    steps:
      - id: checkout
        name: Checkout
        uses: actions/checkout@v6

      - name: Setup uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "latest"
          enable-cache: true
          cache-dependency-glob: "**/pyproject.toml"

      - id: install-python-dependencies
        name: Install Python dependencies
        run: uv sync --extra dev --frozen

      # - id: vulture
      #   name: Run vulture
      #   timeout-minutes: 10
      #   run: >-
      #     uv run vulture
      #     --min-confidence 90
      #     --exclude "tests/*,docs/*"
      #     your_package_name

  test-python:
    name: Test Python code
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python: ["3.11", "3.12", "3.13", "3.14"]
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - id: install-uv
        name: Install uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "latest"
          enable-cache: true
          cache-dependency-glob: "**/pyproject.toml"

      - id: install-python
        name: Install Python
        run: uv python install ${{ matrix.python }}

      - id: install-python-dependencies
        name: Install Python dependencies
        run: uv sync --extra test --python ${{ matrix.python }}

      - id: tests
        name: Run tests
        run: uv run --python ${{ matrix.python }} pytest --cov -sv

  build:
    name: Build release candidate
    runs-on: ubuntu-latest
    needs: [test-python]
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - id: install-uv
        name: Install uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "latest"
          enable-cache: true
          cache-dependency-glob: "**/pyproject.toml"

      - id: build
        name: Build releases
        run: uv build --sdist --wheel

      - id: save
        name: Save artifact
        uses: actions/upload-artifact@v6
        with:
          name: release-candidate
          path: ./dist
          if-no-files-found: error

  release:
    name: PyPI release
    runs-on: ubuntu-latest
    needs: [build]
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
    steps:
      - id: fetch
        name: Fetch artifact
        uses: actions/download-artifact@v7
        with:
          name: release-candidate
          path: ./dist

      - id: publish
        name: Publish release
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          user: __token__
          password: ${{ secrets.PYPI_API_TOKEN }}
          verbose: true
          verify-metadata: false