build-test-publish.yml

# SPDX-FileCopyrightText: Copyright DB InfraGO AG and the capellambse-context-diagrams contributors
# SPDX-License-Identifier: Apache-2.0

name: Build

on:
  pull_request:
  push:
    branches: [main]
    tags: ["v*.*.*"]
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.ref_type == 'tag' && github.sha || '0' }}
  cancel-in-progress: true

jobs:
  test:
    name: Test with Python ${{matrix.python_version}} on ${{matrix.os}}
    runs-on: ${{matrix.os}}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest]
        python_version:
          - "3.10"
          - "3.11"
          - "3.12"
        include:
          - os: windows-latest
            python_version: "3.11"
    env:
      PYTHONUTF8: 1
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: "**/pyproject.toml"
          python-version: ${{matrix.python_version}}
      - name: Setup Deno
        uses: denoland/setup-deno@v2
        with:
          deno-version: "2.x"
      - name: Run unit tests
        run: uv run coverage run
      - name: Report coverage
        if: always()
        run: uv run coverage report

  pre-commit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: "**/pyproject.toml"
          python-version: "3.12"
      - name: Run Pre-Commit
        run: uvx pre-commit run --all-files

  build:
    name: Build wheel
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: "**/pyproject.toml"
          python-version: "3.12"
      - name: Build packages
        run: uv build
      - name: Verify packages
        run: uvx twine check dist/*
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: python-package-distributions
          path: dist/
          if-no-files-found: error
      - name: Push to release branch
        if: startsWith(github.ref, 'refs/tags/v')
        continue-on-error: true
        env:
          GITHUB_REF: ${{github.ref}}
        run: |-
          releasever="$(echo "$GITHUB_REF" | grep -Po '(?<=^refs/tags/v)(?:0\.)?[1-9][0-9]*').x"
          if [[ "$releasever" = 0.5.x ]]; then releasever="${releasever%.x}"; fi
          git push origin "HEAD:release-$releasever"

  build-deno-binaries:
    name: Build Deno binaries
    runs-on: ubuntu-latest
    needs: [build, test]
    if: startsWith(github.ref, 'refs/tags/v')
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Setup Deno
        uses: denoland/setup-deno@v2
        with:
          deno-version: "2.x"
      - name: Build for Windows x64
        run: |
          deno compile --target x86_64-pc-windows-msvc --allow-read --allow-net \
            --allow-env --no-check --output "elk-${{ github.ref_name }}-x86_64-pc-windows-msvc.exe" \
            src/capellambse_context_diagrams/interop/elk.ts

      - name: Build for macOS x64
        run: |
          deno compile --target x86_64-apple-darwin --allow-read --allow-net \
            --allow-env --no-check --output "elk-${{ github.ref_name }}-x86_64-apple-darwin" \
            src/capellambse_context_diagrams/interop/elk.ts

      - name: Build for macOS ARM64
        run: |
          deno compile --target aarch64-apple-darwin --allow-read --allow-net \
            --allow-env --no-check --output "elk-${{ github.ref_name }}-aarch64-apple-darwin" \
            src/capellambse_context_diagrams/interop/elk.ts

      - name: Build for Linux x64
        run: |
          deno compile --target x86_64-unknown-linux-gnu --allow-read --allow-net \
            --allow-env --no-check --output "elk-${{ github.ref_name }}-x86_64-unknown-linux-gnu" \
            src/capellambse_context_diagrams/interop/elk.ts

      - name: Build for Linux ARM64
        run: |
          deno compile --target aarch64-unknown-linux-gnu --allow-read --allow-net \
            --allow-env --no-check --output "elk-${{ github.ref_name }}-aarch64-unknown-linux-gnu" \
            src/capellambse_context_diagrams/interop/elk.ts
      - name: Upload binaries to release
        uses: softprops/action-gh-release@v1
        if: startsWith(github.ref, 'refs/tags/v')
        with:
          files: |
            elk-${{ github.ref_name }}-x86_64-pc-windows-msvc.exe
            elk-${{ github.ref_name }}-x86_64-apple-darwin
            elk-${{ github.ref_name }}-aarch64-apple-darwin
            elk-${{ github.ref_name }}-x86_64-unknown-linux-gnu
            elk-${{ github.ref_name }}-aarch64-unknown-linux-gnu


  pypi:
    name: Publish to PyPI
    runs-on: ubuntu-latest
    needs: [build, test]
    if: startsWith(github.ref, 'refs/tags/v')
    environment:
      name: pypi
      url: https://pypi.org/project/capellambse-context-diagrams
    permissions:
      id-token: write
    steps:
      - name: Download built wheel
        uses: actions/download-artifact@v4
        with:
          name: python-package-distributions
          path: dist/
      - name: Publish to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1