test: refactor CI

per request from #1432 (comment)

closes #1366

### Changes

- remove all test jobs from test.yml workflow except the one that runs on s390x platform.
- rename the test.yml Display name accordingly: "Tests (s390x)"
- skip building ppc64le wheels when not triggered on master branch.
- reconfigure wheels.yml workflow triggers.
   The wheels.yml CI now runs for

   1. any push to master branch
   2. any change in a PR that targets master branch (excluding when PR changes only affect docs/ path)
   3. any tag (starting with "v") is pushed
- added `skip-existing` param in case deployment to PyPI suffers a network error and the CI just needs to be re-run.
- cherry pick changes from PR #1366 (about CI triggers for lint and spell-check CI workflows)
- auto-cancel wheels CI if new run triggered on non-default branch
- added step to job that deploys wheels to PyPI. This new step creates a GitHub Release for the tag that was pushed.

Author: 2bndy5

.github/workflows/codespell.yml

@@ -4,7 +4,9 @@ name: Codespell
 
 on:
   pull_request:
+    branches: [master]
   push:
+    branches: [master]
 
 permissions:
   contents: read

.github/workflows/lint.yml

@@ -2,7 +2,9 @@ name: Lints
 
 on:
   pull_request:
+    branches: [master]
   push:
+    branches: [master]
     paths-ignore:
     - '**.rst'
 

.github/workflows/tests.yml

@@ -1,40 +1,14 @@
-name: Tests
+name: Tests (s390x)
 
 on:
   pull_request:
+    branches: [master]
   push:
+    branches: [master]
     paths-ignore:
     - '**.rst'
 
 jobs:
-  linux:
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        include:
-        - os: ubuntu-24.04
-          python-version: '3.10'
-        - os: ubuntu-24.04
-          python-version: '3.13'
-        - os: ubuntu-24.04
-          python-version: 'pypy3.10'
-        - os: ubuntu-24.04-arm
-          python-version: '3.13'
-
-    steps:
-    - name: Checkout pygit2
-      uses: actions/checkout@v5
-
-    - name: Set up Python
-      uses: actions/setup-python@v6
-      with:
-        python-version: ${{ matrix.python-version }}
-
-    - name: Linux
-      run: |
-        sudo apt install tinyproxy
-        LIBSSH2_VERSION=1.11.1 LIBGIT2_VERSION=1.9.1 /bin/sh build.sh test
-
   linux-s390x:
     runs-on: ubuntu-24.04
     if: github.ref == 'refs/heads/master'
@@ -53,19 +27,3 @@ jobs:
         run: |
           LIBSSH2_VERSION=1.11.1 LIBGIT2_VERSION=1.9.1 /bin/sh build.sh test
       continue-on-error: true # Tests are expected to fail, see issue #812
-
-  macos-arm64:
-    runs-on: macos-latest
-    steps:
-    - name: Checkout pygit2
-      uses: actions/checkout@v5
-
-    - name: Set up Python
-      uses: actions/setup-python@v6
-      with:
-        python-version: '3.13'
-
-    - name: macOS
-      run: |
-        export OPENSSL_PREFIX=`brew --prefix openssl@3`
-        LIBSSH2_VERSION=1.11.1 LIBGIT2_VERSION=1.9.1 /bin/sh build.sh test

.github/workflows/wheels.yml

@@ -1,12 +1,18 @@
 name: Wheels
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref_name != 'master' }}
+
 on:
   push:
-    branches:
-    - master
-    - wheels-*
+    branches: [master]
     tags:
-    - 'v*'
+      - 'v*'
+  pull_request:
+    branches: [master]
+    paths-ignore:
+      - 'docs/**'
 
 jobs:
   build_wheels:
@@ -54,6 +60,7 @@ jobs:
 
   build_wheels_ppc:
     name: Wheels for linux-ppc
+    if: github.ref == 'refs/heads/master'
     runs-on: ubuntu-24.04
 
     steps:
@@ -140,3 +147,17 @@ jobs:
       with:
         user: __token__
         password: ${{ secrets.PYPI_API_TOKEN }}
+        skip-existing: true
+
+    - name: Create GitHub Release
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+        TAG: ${{ github.ref_name }}
+        REPO: ${{ github.repository }}
+      # https://cli.github.com/manual/gh_release_create
+      run: >-
+        gh release create ${TAG}
+        --verify-tag
+        --repo ${REPO}
+        --title ${TAG}
+        --generate-notes