Publish Wheel package to PyPI workflow (nyu-mlab/iot-inspector-client)

name: Publish Wheel package to PyPI
 
on:
  workflow_dispatch:
    inputs:
      bump_type:
        type: choice
        required: true
        default: patch
        options:
          - patch
          - minor
          - major
        description: "Select the type of version bump for the release"
  #push:
  #  branches:
  #    - master
 
# Set no permissions by default. This is the most secure practice.
# We will grant specific permissions to each job that needs them.
permissions: {}
 
jobs:
  create_release:
    timeout-minutes: 30
    runs-on: latchkey-small
    permissions:
      contents: read
    outputs:
      v-version: ${{ steps.version.outputs.v-version }}
    steps:
      - name: Get next version
        uses: reecetech/version-increment@2024.10.1
        id: version
        with:
          release_branch: master
          use_api: true
          increment: ${{ github.event.inputs.bump_type || 'patch' }}
 
  build:
    timeout-minutes: 30
    runs-on: ${{ matrix.os }}
    permissions:
      contents: read
    needs: [create_release]
    strategy:
      fail-fast: false
      matrix:
        os: [ macos-latest, ubuntu-latest, windows-latest ]
 
    steps:
    - name: Checkout project sources
      uses: actions/checkout@v5
 
    - name: Create wheel file
      if: runner.os == 'Linux'
      run: |
        python3 -m pip install --upgrade pip
        python3 -m pip install setuptools wheel build setuptools_scm
        PRETEND_VERSION=${{ needs.create_release.outputs.v-version }} python3 -m build --wheel .
 
    - name: Store the IoT Inspector Python wheel
      if: runner.os == 'Linux'
      uses: actions/upload-artifact@v5
      with:
        name: iot-inspector
        path: dist/*.whl
        if-no-files-found: error
 
    - name: Install NSIS
      if: runner.os == 'Windows'
      uses: negrutiu/nsis-install@v2
 
    - name: Create Windows IoT Inspector launcher
      if: runner.os == 'Windows'
      shell: pwsh
      run: |
        makensis iot-inspector.nsi
 
    - name: Store the IoT Inspector executable
      if: runner.os == 'Windows'
      uses: actions/upload-artifact@v5
      with:
        name: iot-exe
        path: ./*.exe
        if-no-files-found: error
 
  publish-to-pypi:
    timeout-minutes: 30
    name: Publish Python 🐍 distribution 📦 to PyPI
    if: github.repository == 'nyu-mlab/iot-inspector-client'
    needs: [create_release, build]
    runs-on: latchkey-small
    environment:
      name: pypi
      url: https://pypi.org/p/iot-inspector  # Replace <package-name> with your PyPI project name
    permissions:
      id-token: write  # IMPORTANT: mandatory for trusted publishing
      contents: write  # Required for creating releases
 
    steps:
      - name: Download the wheel file
        uses: actions/download-artifact@v5
        with:
          name: iot-inspector
          path: dist/
 
      - name: Publish distribution 📦 to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          verbose: true
 
      - name: Download all the IoT Inspector executable
        uses: actions/download-artifact@v5
        with:
          name: iot-exe
          path: dist/
 
      - name: Upload wheel package to release
        uses: softprops/action-gh-release@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ needs.create_release.outputs.v-version }}
          draft: false
          generate_release_notes: true
          prerelease: false
          files: |
            dist/*.whl