python.yml

name: Build and Test

on:
  # Pushes to PR branches are covered by the pull_request event; running
  # on every push as well would test each PR twice. Tags must be kept so
  # that the pypi-publish job runs on release.
  push:
    branches: [main]
    tags: ["*"]
  pull_request:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - name: Set up Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install build
      - name: Build distribution
        run: python -m build
      - uses: actions/upload-artifact@v7
        with:
          path: ./dist/*

  test:
    needs: build
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ["3.12", "3.13", "3.14"]

    services:
      rabbitmq:
        image: rabbitmq:3
        ports:
          - 5672:5672
        options: >-
          --health-cmd "rabbitmq-diagnostics -q check_port_connectivity"
          --health-interval 5s
          --health-timeout 5s
          --health-retries 12

    env:
      RABBITMQ_HOST: localhost
      RABBITMQ_PORT: 5672

    steps:
      - uses: actions/checkout@v7
      - uses: actions/download-artifact@v8
        with:
          name: artifact
          path: dist
      - name: Set up uv with Python ${{ matrix.python-version }}
        uses: astral-sh/setup-uv@v10.3.3
        with:
          python-version: ${{ matrix.python-version }}
          activate-environment: true
      - name: Install dependencies
        run: |
          uv sync --locked --no-install-project
          uv pip install dist/*.whl
      - name: Test with pytest
        run: |
          pytest tests

  pypi-publish:
    name: Upload release to PyPI
    needs: test
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
    runs-on: ubuntu-latest
    environment:
      name: release
      url: https://pypi.org/workflows
    permissions:
      id-token: write
    steps:
      - uses: actions/download-artifact@v8
        with:
          name: artifact
          path: dist
      - name: Publish package distributions to PyPI
        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3