release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      tag:
        description: 'Release tag (e.g. v1.16). Leave blank to skip GitHub Release.'
        required: false
        type: string
        default: ""
      publish_to_testpypi:
        description: 'Publish wheels/sdist to TestPyPI'
        type: boolean
        default: false
  push:
    tags:
      - v*

permissions:
  contents: write
  id-token: write

jobs:
  validate-tag:
    runs-on: ubuntu-latest
    if: inputs.tag != '' || github.event_name == 'push'
    outputs:
      tag: ${{ steps.set-tag.outputs.tag }}
    steps:
      - name: Determine tag
        id: set-tag
        run: |
          if [ "${{ github.event_name }}" = "push" ]; then
            TAG="${{ github.ref_name }}"
          else
            TAG="${{ inputs.tag }}"
          fi
          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"

      - name: Check tag format
        run: |
          TAG="${{ steps.set-tag.outputs.tag }}"
          if [[ ! "${TAG}" =~ ^v[0-9]+\.[0-9]+(\.[0-9]+)?(-[a-zA-Z0-9._-]+)?$ ]]; then
            echo "::error::Tag '${TAG}' is not valid. Must match vMAJOR.MINOR[.PATCH][-prerelease]"
            exit 1
          fi
          echo "Tag '${TAG}' is valid."

  build-linux:
    uses: ./.github/workflows/build-linux.yml

  build-macos:
    uses: ./.github/workflows/build-macos.yml

  build-windows:
    uses: ./.github/workflows/build-windows.yml

  publish-testpypi:
    name: Publish to TestPyPI
    needs: [build-linux, build-macos, build-windows]
    if: inputs.publish_to_testpypi
    runs-on: ubuntu-latest
    environment:
      name: release
      url: https://test.pypi.org/p/python-lzo
    steps:
      - uses: actions/download-artifact@v6
        with:
          path: dist
      - run: |
          mv dist/*/*.whl dist/ 2>/dev/null || true
          mv dist/*/*.tar.gz dist/ 2>/dev/null || true
          find dist -mindepth 1 -type d -delete
      - uses: pypa/gh-action-pypi-publish@release/v1
        with:
          repository-url: https://test.pypi.org/legacy/

  publish-github-release:
    name: Publish GitHub Release
    needs: [validate-tag, build-linux, build-macos, build-windows]
    if: |
      always() &&
      needs.validate-tag.result == 'success' &&
      !cancelled() &&
      !contains(needs.*.result, 'failure')
    runs-on: ubuntu-latest
    env:
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      TAG: ${{ needs.validate-tag.outputs.tag }}
    steps:
      - name: Checkout repo
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          persist-credentials: true

      - name: Download all artifacts
        uses: actions/download-artifact@v6
        with:
          path: dist

      - name: Flatten artifacts
        run: |
          mv dist/*/*.whl dist/ 2>/dev/null || true
          mv dist/*/*.tar.gz dist/ 2>/dev/null || true
          find dist -mindepth 1 -type d -delete

      - name: List artifacts
        run: ls -lh dist/

      - name: Create git tag if it does not exist
        run: |
          if git ls-remote --tags origin "refs/tags/${TAG}" | grep -q "${TAG}"; then
            echo "Tag ${TAG} already exists — skipping tag creation."
          else
            echo "Tag ${TAG} does not exist — creating it from HEAD."
            git config user.name  "github-actions[bot]"
            git config user.email "github-actions[bot]@users.noreply.github.com"
            git tag -a "${TAG}" -m "Release ${TAG}"
            git push origin "${TAG}"
            echo "Tag ${TAG} pushed."
          fi

      - name: Create or update GitHub release
        run: |
          if gh release view "${TAG}" > /dev/null 2>&1; then
            echo "Release for ${TAG} already exists — replacing assets."
            gh release upload "${TAG}" dist/*.whl dist/*.tar.gz --clobber
          else
            echo "No release for ${TAG} yet — creating release and uploading assets."
            gh release create "${TAG}" dist/*.whl dist/*.tar.gz \
              --title "${TAG}" \
              --generate-notes
          fi