main.yml

name: ci

on: [ push, pull_request ]

permissions:
  contents: read
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  lint:
    uses: mhils/workflows/.github/workflows/python-tox.yml@main
    with:
      cmd: tox -e lint -- -v ${{ matrix.args }}

  test:
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            py: 3.12.0-alpha - 3.12.0
          - os: windows-latest
            py: 3.11.2
            args: --cov-fail-under=100
          - os: macos-latest
            py: 3.11.2
            args: --cov-fail-under=100
          - os: ubuntu-latest
            py: 3.11.2
            args: --cov-fail-under=100
          - os: ubuntu-latest
            py: 3.10.10
          - os: ubuntu-latest
            py: 3.9.16
          - os: ubuntu-latest
            py: 3.8.16
    uses: mhils/workflows/.github/workflows/python-tox.yml@main
    with:
      cmd: tox -e py -- -vvv ${{ matrix.args }}
      os: ${{ matrix.os }}
      python-version: ${{ matrix.py }}

  build:
    uses: mhils/workflows/.github/workflows/python-build.yml@main

  check:
    if: always()
    needs:
    - lint
    - test
    - build
    uses: mhils/workflows/.github/workflows/alls-green.yml@main
    with:
      jobs: ${{ toJSON(needs) }}

  deploy:
    uses: mhils/workflows/.github/workflows/python-deploy.yml@main
    needs: check
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
    secrets:
      password: ${{ secrets.TWINE_PASSWORD }}