publish_python.yml

# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# SPDX-License-Identifier: Apache-2.0

# Publish all Python packages to PyPI.
#
# Triggered by pushing a tag like v0.7.0 or manually via workflow_dispatch.
# Auth uses PyPI trusted publishing (OIDC) — no API tokens needed.

name: Publish Python

on:
  push:
    tags:
      - "v*"
  workflow_dispatch:

concurrency:
  group: publish-python-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: read

jobs:
  publish:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    environment:
      name: pypi_github_publishing
    steps:
      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
      - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
        with:
          enable-cache: true
          python-version: "3.12"
          version: "0.6.6"

      - name: Build and publish packages
        run: |
          set -uo pipefail

          # Publish all core and plugin packages for v0.9.0 release.
          PACKAGES=(
            packages/genkit
            packages/genkit-anthropic
            packages/genkit-django
            packages/genkit-evaluators
            packages/genkit-fastapi
            packages/genkit-flask
            packages/genkit-google-cloud
            packages/genkit-google-genai
            packages/genkit-middleware
            packages/genkit-ollama
            packages/genkit-openai
            packages/genkit-vertexai
          )

          FAILED=()
          for pkg in "${PACKAGES[@]}"; do
            echo "::group::$pkg"
            if uv build "$pkg" --out-dir dist/; then
              echo "Build succeeded: $pkg"
            else
              echo "::error::Build failed: $pkg"
              FAILED+=("$pkg")
            fi
            echo "::endgroup::"
          done

          if [ ${#FAILED[@]} -gt 0 ]; then
            echo "::error::Failed packages: ${FAILED[*]}"
            exit 1
          fi

          echo "::group::Build tombstone packages"
          python3 scripts/publish_tombstones.py --dist-dir dist/
          echo "::endgroup::"

      - name: Publish to PyPI
        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
        with:
          packages-dir: dist/
          verbose: true
          skip-existing: true

  verify:
    needs: publish
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
        with:
          python-version: "3.12"
      - name: Smoke test
        env:
          TAG: ${{ github.ref_name }}
        run: |
          VERSION="${TAG#v}"
          pip install "genkit==${VERSION}"
          python -c "from genkit import Genkit; Genkit(); print('ok')"