name: build

on:

push:

branches: ["dev", "*.x-line"]

tags: ["*"]

pull_request:

permissions:

contents: read

jobs:

tests:

name: ${{ matrix.name }}

runs-on: ubuntu-latest

strategy:

fail-fast: false

matrix:

include:

- { name: "3.10", python: "3.10", tox: py310-marshmallow }

- { name: "3.14", python: "3.14", tox: py314-marshmallow }

- { name: "lowest", python: "3.10", tox: py310-lowest }

- { name: "dev", python: "3.14", tox: py314-marshmallowdev }

steps:

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

with:

persist-credentials: false

- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6

with:

python-version: ${{ matrix.python }}

- run: python -m pip install tox

- run: python -m tox -e${{ matrix.tox }}

build:

name: Build package

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

with:

persist-credentials: false

- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6

with:

python-version: "3.14"

- name: Install pypa/build

run: python -m pip install build

- name: Build a binary wheel and a source tarball

run: python -m build

- name: Install twine

run: python -m pip install twine

- name: Check build

run: python -m twine check --strict dist/*

- name: Store the distribution packages

uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7

with:

name: python-package-distributions

path: dist/

# this duplicates pre-commit.ci, so only run it on tags

# it guarantees that linting is passing prior to a release

lint-pre-release:

if: startsWith(github.ref, 'refs/tags')

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

with:

persist-credentials: false

- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6

with:

python-version: "3.14"

- run: python -m pip install tox

- run: python -m tox -e lint

publish-to-pypi:

name: PyPI release

if: startsWith(github.ref, 'refs/tags/')

needs: [build, tests, lint-pre-release]

runs-on: ubuntu-latest

environment:

name: pypi

url: https://pypi.org/p/webargs

permissions:

id-token: write

steps:

- name: Download all the dists

uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8

with:

name: python-package-distributions

path: dist/

- name: Publish distribution to PyPI

uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1