feat: make release flow reusable

nijel · nijel · commit f5687baf37e2 · 2025-01-10T15:33:36.000+01:00
Fixes #984
diff --git a/.github/workflows/release-shared.yml b/.github/workflows/release-shared.yml
@@ -0,0 +1,50 @@
+name: Release
+
+on:
+  workflow_call:
+    inputs:
+      github_event_name:
+        required: true
+        type: string
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+    - uses: actions/checkout@v4
+    - uses: astral-sh/setup-uv@v5
+
+    - name: Verify tag is documented
+      if: inputs.github_event_name == 'release'
+      run: |
+        CURRENT_TAG=${GITHUB_REF#refs/tags/}
+        CURRENT_VERSION=$(sed -n 's/version = "\(.*\)"/\1/p'  pyproject.toml)
+        if [ "${CURRENT_VERSION}" != "${CURRENT_TAG}" ]; then
+            echo "========================================================================"
+            echo "Error: tag '${CURRENT_TAG}' and version '${CURRENT_VERSION}' don't match"
+            echo "========================================================================"
+            exit 1;
+        fi
+
+    - run: uv build
+
+    - name: Verify wheel install
+      run: uv venv venv-install-whl . venv-install-whl/bin/activate uv pip install dist/*.whl
+
+    - name: Verify source install
+      run: uv venv venv-install-tar . venv-install-tar/bin/activate uv pip install dist/*.tar.gz
+
+    - uses: actions/upload-artifact@v4
+      if: inputs.github_event_name == 'release'
+      with:
+        name: dist
+        path: |
+          dist/*.tar.gz
+          dist/*.whl
+
+    - run: uvx twine check dist/*
+
+    - if: inputs.github_event_name == 'release'
+      run: uv publish --trusted-publishing always
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,43 +8,8 @@ on:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
+    uses: ./.github/workflows/release-shared.yml
+    with:
+      github_event_name: ${{ github.event_name }}
     permissions:
       id-token: write
-    steps:
-    - uses: actions/checkout@v4
-    - uses: astral-sh/setup-uv@v5
-
-    - name: Verify tag is documented
-      if: github.event_name == 'release'
-      run: |
-        CURRENT_TAG=${GITHUB_REF#refs/tags/}
-        CURRENT_VERSION=$(sed -n 's/version = "\(.*\)"/\1/p'  pyproject.toml)
-        if [ "${CURRENT_VERSION}" != "${CURRENT_TAG}" ]; then
-            echo "========================================================================"
-            echo "Error: tag '${CURRENT_TAG}' and version '${CURRENT_VERSION}' don't match"
-            echo "========================================================================"
-            exit 1;
-        fi
-
-    - name: Build dist
-      run: uv build
-
-    - name: Archive dist
-      if: github.event_name == 'release'
-      uses: actions/upload-artifact@v4
-      with:
-        name: dist
-        path: |
-          dist/*.tar.gz
-          dist/*.whl
-
-    - name: Verify long description rendering
-      run: uvx twine check dist/*
-
-    - name: Publish
-      env:
-        # TODO: remove once trusted publishing is configured
-        UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-      if: github.event_name == 'release' && github.repository == 'python-social-auth/social-core'
-      run: uv publish
