name: build-test-deploy

on:
  push:
    branches: [main]
    tags: ["*"]
  pull_request: {branches: [main]}
  schedule:
    - cron: '0 0 * * MON'

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python: [3]
    steps:
    - uses: actions/checkout@v3
    - name: Set up Python ${{ matrix.python }}
      uses: actions/setup-python@v4
      with:
        python-version: ${{ matrix.python }}
    - name: Build package
      run: pipx run build
    - name: Check package metadata
      run: pipx run twine check dist/*
    - name: Save packages
      uses: actions/upload-artifact@v3
      with:
        name: dist
        path: dist/

  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python:
          - "3.7"
          - "3.8"
          - "3.9"
          - "3.10"
          - "3.11"
          - "3.12"
          - "pypy-3.7"
    steps:
    - uses: actions/checkout@v3
    - name: Set up Python ${{ matrix.python }}
      uses: actions/setup-python@v4
      with:
        python-version: ${{ matrix.python }}
        allow-prereleases: true
    - name: Install tox
      run: pip install --upgrade pip tox tox-gh-actions
    - name: Test
      run: tox

  deploy:
    needs: [build, test]
    runs-on: ubuntu-latest
    permissions:
      # IMPORTANT: this permission is mandatory for trusted publishing
      id-token: write
    steps:
    - name: Load packages
      uses: actions/download-artifact@v3
      with:
        name: dist
        path: dist/
    - name: Test PyPI upload
      uses: pypa/gh-action-pypi-publish@release/v1
      with:
        repository_url: https://test.pypi.org/legacy/
        skip_existing: true
    - name: Upload to PyPI (on tags)
      if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
      uses: pypa/gh-action-pypi-publish@release/v1
