build_cibuildwheel.yml

name: cibuildwheel

on: [push, pull_request]

jobs:
  build_wheels:
    name: Build wheels on ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest, macOS-latest]

    steps:
      - uses: actions/checkout@v4
      - name: checkout submodules
        run: git submodule update --init --recursive

      # Used to host cibuildwheel
      - uses: actions/setup-python@v5

      - name: Install cibuildwheel and other dependencies
        run: python -m pip install cibuildwheel==2.17.0 build wheel setuptools twine

      # - name: Install LLVM (clang-cl) on windows
      #   run: choco install -y llvm
      #   if: runner.os == 'Windows'

      - name: Build sdist
        run: python -m build --no-isolation --sdist --outdir wheelhouse
        if: runner.os == 'Windows'

      - name: Build wheels
        run: python -m cibuildwheel --output-dir wheelhouse
        # to supply options, put them in 'env', like:
        env:
          CIBW_ARCHS: auto64
          CIBW_ARCHS_MACOS: "universal2"
          CIBW_ENVIRONMENT_MACOS: MACOSX_DEPLOYMENT_TARGET=11.0
          CIBW_ENVIRONMENT_LINUX: CXXFLAGS='-fconcepts'
          CIBW_BUILD_VERBOSITY_WINDOWS: 2
          CIBW_SKIP: "*pypy* *pp* *cp36* *cp37* *musl*"

      - name: Check wheels
        run: python -m twine check wheelhouse/*.whl

      - name: Upload Files
        uses: actions/upload-artifact@v4
        with:
          name: dist-${{ matrix.os }}
          path: |
            ./wheelhouse/*.whl
            ./wheelhouse/*.tar.gz

  merge_wheels:
   runs-on: ubuntu-latest
   needs: build_wheels
   steps:
     - name: Merge Artifacts
       uses: actions/upload-artifact/merge@v4
       with:
         name: dist
         pattern: dist-*


  testpypi-publish:
    name: Upload to TestPyPI
    needs: [merge_wheels]
    runs-on: ubuntu-latest
    environment:
      name: testpypi
    permissions:
      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
    steps:
    - uses: actions/setup-python@v5

    - uses: actions/download-artifact@v4
      with:
        name: dist
        path: dist

    - run: |
        set -x
        ls -R
        du -sh

    - uses: pypa/gh-action-pypi-publish@release/v1.9
      with:
        repository-url: https://test.pypi.org/legacy/
        password: ${{ secrets.TESTPYPI_TOKEN }}
        skip-existing: true

  pypi-publish:
    name: Upload to PyPI if release
    needs: [merge_wheels]
    runs-on: ubuntu-latest
    permissions:
      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
    if: github.event_name == 'release' 
    #&& (github.event.action == 'published' || github.event.action == 'edited')

    steps:
    - uses: actions/setup-python@v5

    - uses: actions/download-artifact@v4
      with:
        name: dist
        path: dist

    - name: Display structure of downloaded files
      run: |
        set -x
        ls -R
        du -sh

    - uses: pypa/gh-action-pypi-publish@release/v1.9
      with:
        password: ${{ secrets.PYPI_TOKEN }}
        skip-existing: false