chore: trigger release process

.github/workflows/_release.yaml

@@ -0,0 +1,52 @@
+name: template-release
+
+on:
+  workflow_call:
+    inputs:
+      environment:
+        type: string
+        description: release environment
+        required: true
+      url:
+        type: string
+        description: release url
+        required: true
+
+jobs:
+  build:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version-file: pyproject.toml
+      - uses: astral-sh/setup-uv@v5
+      - name: Install project
+        run: uv sync --all-extras
+      - name: Build package
+        run: make build
+      - name: Store the distribution packages
+        uses: actions/upload-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+
+  release:
+    needs: build
+    permissions:
+      id-token: write
+      contents: write
+    runs-on: ubuntu-latest
+    environment:
+      name: ${{ inputs.environment }}
+      url: ${{ inputs.url }}
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+      - name: Publish distribution 📦 to  ${{ vars.PYPI_NAME }}
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: ${{ vars.PYPI_URL }}
+          packages-dir: dist/

.github/workflows/labeler.yaml

@@ -0,0 +1,14 @@
+name: label-pr
+
+"on":
+  - pull_request
+  - issues
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: srvaroa/labeler@master
+        env:
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/pr.yaml

@@ -1,28 +1,42 @@
-name: Dev tests
+name: checks
 
 on:
   pull_request:
+    branches:
+      - dev
+      - main
+
 
-env:
-  PYTHON_VERSION_DEFAULT: "3.10.8"
 jobs:
-  test:
+  check:
+    name: ${{ matrix.command }}-${{ matrix.python-version }}
+    strategy:
+      max-parallel: 2
+      matrix:
+        python-version: ["3.10", "3.11", "3.12"]
+        command: ["test", "type-check", "dep-check", "lint"]
+        # Skip redundant checks.
+        exclude:
+          - command: "lint"
+            python-version: "3.11"
+          - command: "lint"
+            python-version: "3.12"
+          - command: "dep-check"
+            python-version: "3.11"
+          - command: "dep-check"
+            python-version: "3.12"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
         with:
-          fetch-depth: 1
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: 3.10.8
-      - name: Install uv
-        uses: yezz123/setup-uv@v4
-      - name: Install rye
-        uses: eifinger/setup-rye@v4
+          python-version: ${{ matrix.python-version }}
+      - uses: astral-sh/setup-uv@v5
         with:
-          version: "latest"
-      - name: Sync dependencies
-        run: rye sync
-      - name: Run checks
-        run: rye run pre-commit run --all-files
+          enable-cache: true
+          cache-dependency-glob: "uv.lock"
+          python-version:  ${{ matrix.python-version }}
+      - name: Install project
+        run: uv sync --all-extras
+      - name: Run test
+        run: make ${{ matrix.command }}

.github/workflows/release.yaml

@@ -1,72 +1,25 @@
-name: Release
-
+name: release
 on:
   push:
-    tags:
-      - "v*"
+    tags: ['v[0-9]+.[0-9]+.[0-9]']
+  workflow_dispatch:
 
-env:
-  PYTHON_VERSION_DEFAULT: "3.10.8"
+concurrency:
+  group: prod
+  cancel-in-progress: true
 
 jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 1
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: 3.10.8
-      - name: Install uv
-        uses: yezz123/setup-uv@v4
-      - name: Install rye
-        uses: eifinger/setup-rye@v4
-        with:
-          version: "latest"
-      - name: Sync dependencies
-        run: rye sync
-      - name: Build package
-        run: make build
-      - name: Store the distribution packages
-        uses: actions/upload-artifact@v4
-        with:
-          name: python-package-distributions
-          path: dist/
-
-  test-release:
-    needs: build
-    runs-on: ubuntu-latest
-    environment: TEST
-    permissions:
-      id-token: write # IMPORTANT: mandatory for trusted publishing
-    steps:
-      - name: Download all the dists
-        uses: actions/download-artifact@v4
-        with:
-          name: python-package-distributions
-          path: dist/
-      - name: Publish distribution 📦 to TestPyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          repository-url: https://test.pypi.org/legacy/
-          packages-dir: dist/
-
   release:
-    needs: test-release
-    runs-on: ubuntu-latest
-    environment: PyPI
-    permissions:
-      id-token: write # IMPORTANT: mandatory for trusted publishing
-    steps:
-      - name: Download all the dists
-        uses: actions/download-artifact@v4
-        with:
-          name: python-package-distributions
-          path: dist/
-      - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          repository-url: https://upload.pypi.org/legacy/
-          packages-dir: dist/
+    name: test-pypi-release
+    uses: ./.github/workflows/_release.yaml
+    with:
+      environment: DEV
+      url: https://test.pypi.org/p/gentroutils
+
+  dev-release:
+    needs: release
+    name: pypi-release
+    uses: ./.github/workflows/_release.yaml
+    with:
+      environment: PyPI
+      url: https://pypi.org/p/gentroutils

.github/workflows/release_pr.yaml

@@ -1,19 +1,19 @@
-name: Trigger Release
+name: trigger-release
 
-"on":
+on:
   schedule:
     - cron: "0 11 * * 2"
   workflow_dispatch:
 
 jobs:
-  pull-request:
+  prepare-release-pr:
     runs-on: ubuntu-latest
     environment: DEV
     steps:
       - uses: actions/create-github-app-token@v1
         id: trigger-token
         with:
-          app-id: ${{ vars.TRIGGER_WORKFLOW_GH_APP_ID}}
+          app-id: ${{ vars.TRIGGER_WORKFLOW_GH_APP_ID }}
           private-key: ${{ secrets.TRIGGER_WORKFLOW_GH_APP_KEY }}
       - uses: actions/checkout@v4
         with:

.github/workflows/tag.yaml

@@ -1,16 +1,45 @@
-name: Tag
-
-"on":
+name: tag-release
+on:
   push:
-    # main branch - release, dev branch - dev release
-    branches: ["main", "dev"]
-
-concurrency:
-  group: deploy
-  cancel-in-progress: false
-
-env:
-  PYTHON_VERSION_DEFAULT: "3.10.8"
+    branches:
+      - dev
+      - main
 
 
 jobs:
+  create-tag:
+    # NOTE: only trigger the workflow when the commit is not from the GitHubActions bot (prevent self-triggering)
+    if: github.event.commits[0].author.name != 'github-actions'
+    runs-on: ubuntu-latest
+    concurrency: release
+    environment: DEV
+    permissions:
+      contents: write
+
+    steps:
+      # NOTE: commits using GITHUB_TOKEN does not trigger workflows and we want to trigger PiPY from tag
+      - uses: actions/create-github-app-token@v1
+        id: trigger-token
+        with:
+          app-id: ${{ vars.TRIGGER_WORKFLOW_GH_APP_ID}}
+          private-key: ${{ secrets.TRIGGER_WORKFLOW_GH_APP_KEY }}
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          repository: opentargets/gentroutils
+          token: ${{ secrets.GITHUB_TOKEN }}
+          persist-credentials: false
+          ref: ${{ github.ref_name }}
+      - name: Create package release
+        id: semrelease
+        # v9.6.0 is required due to the python v3.12 in the newer version of semantic release action which
+        # breaks the poetry build command.
+        uses: python-semantic-release/python-semantic-release@v9.19.1
+        with:
+          github_token: ${{ steps.trigger-token.outputs.token }}
+      - name: Publish package to GitHub Release
+        uses: python-semantic-release/publish-action@v9.19.1
+        if: ${{ steps.semrelease.outputs.released }} == 'true'
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          tag: ${{ steps.semrelease.outputs.tag }}