[main]: update workflow for pypi

Author: recursivezero

.github/workflows/publish.yml

@@ -1,14 +1,14 @@
-name: CI & Publish to TestPyPI
-run-name: Publish Package to TestPyPI
+name: Build & Publish to PyPI
+run-name: Publish Package to PyPI
 
 on:
   push:
     branches:
-      - main
+      - release
 
-env:
-  REPO_ALIAS: rz-sample
-  TEST_PYPI_URL: https://test.pypi.org/legacy/
+concurrency:
+  group: pypi-publish
+  cancel-in-progress: true
 
 jobs:
   lint:
@@ -27,6 +27,9 @@ jobs:
   build-and-publish:
     needs: lint
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - name: Checkout code
         uses: actions/checkout@v5
@@ -38,13 +41,14 @@ jobs:
 
       - name: Install Poetry
         run: |
-          curl -sSL https://install.python-poetry.org | python3 -
+          curl -sSL https://install.python-poetry.org | python3 - --version 1.8.3
           echo "$HOME/.local/bin" >> $GITHUB_PATH
 
       - name: Check if version exists
         id: check_version
         run: |
           # 1. Get metadata from pyproject.toml
+          poetry install --no-interaction --no-root
           PACKAGE_NAME=$(poetry version | awk '{print $1}')
           PACKAGE_VERSION=$(poetry version --short)
 
@@ -53,7 +57,7 @@ jobs:
 
           # 2. Check the SPECIFIC version JSON endpoint
           # We use the JSON API because it's reliable for bots
-          URL="https://test.pypi.org/pypi/$PACKAGE_NAME/$PACKAGE_VERSION/json"
+          URL="https://pypi.org/pypi/$PACKAGE_NAME/$PACKAGE_VERSION/json"
           STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$URL")
 
           if [ "$STATUS" == "200" ]; then
@@ -67,12 +71,12 @@ jobs:
       - name: Configure and Publish
         if: steps.check_version.outputs.should_publish == 'true'
         run: |
-          poetry config repositories.${{ env.REPO_ALIAS }} ${{ env.TEST_PYPI_URL }}
-          poetry config pypi-token.${{ env.REPO_ALIAS }} ${{ secrets.TEST_PYPI_TOKEN }}
-          poetry publish -r ${{ env.REPO_ALIAS }} --build
+          # poetry config repositories.${{ env.REPO_ALIAS }} ${{ env.PYPI_URL }}
+          # poetry config pypi-token.${{ env.REPO_ALIAS }} ${{ secrets.PYPI_TOKEN }}
+          poetry publish --build
 
           # Add Success Summary
           NAME=${{ steps.check_version.outputs.pkg_name }}
           VER=${{ steps.check_version.outputs.pkg_ver }}
           echo "### ✅ Success: Published $NAME v$VER" >> $GITHUB_STEP_SUMMARY
-          echo "View your package on TestPyPI: [rz-sample](https://test.pypi.org/project/rz-sample/)" >> $GITHUB_STEP_SUMMARY
+          echo "View your package on PyPI: [rz-sample](https://pypi.org/project/$NAME/)" >> $GITHUB_STEP_SUMMARY

.github/workflows/testpy-publish.yml

@@ -0,0 +1,78 @@
+name: CI & Publish to TestPyPI
+run-name: Publish Package to TestPyPI
+
+on:
+  push:
+    branches:
+      - main
+
+env:
+  REPO_ALIAS: rz-sample
+  TEST_PYPI_URL: https://test.pypi.org/legacy/
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Install Ruff
+        run: pip install ruff
+      - name: Run Ruff
+        run: ruff check . && ruff format --check .
+
+  build-and-publish:
+    needs: lint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install Poetry
+        run: |
+          curl -sSL https://install.python-poetry.org | python3 -
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Check if version exists
+        id: check_version
+        run: |
+          # 1. Get metadata from pyproject.toml
+          PACKAGE_NAME=$(poetry version | awk '{print $1}')
+          PACKAGE_VERSION=$(poetry version --short)
+
+          echo "pkg_name=$PACKAGE_NAME" >> $GITHUB_OUTPUT
+          echo "pkg_ver=$PACKAGE_VERSION" >> $GITHUB_OUTPUT
+
+          # 2. Check the SPECIFIC version JSON endpoint
+          # We use the JSON API because it's reliable for bots
+          URL="https://test.pypi.org/pypi/$PACKAGE_NAME/$PACKAGE_VERSION/json"
+          STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$URL")
+
+          if [ "$STATUS" == "200" ]; then
+            echo "should_publish=false" >> $GITHUB_OUTPUT
+            echo "### ⏭️ Skip: Version $PACKAGE_VERSION already exists" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "should_publish=true" >> $GITHUB_OUTPUT
+            echo "### 🚀 New version $PACKAGE_VERSION detected" >> $GITHUB_STEP_SUMMARY
+          fi
+
+      - name: Configure and Publish
+        if: steps.check_version.outputs.should_publish == 'true'
+        run: |
+          poetry config repositories.${{ env.REPO_ALIAS }} ${{ env.TEST_PYPI_URL }}
+          poetry config pypi-token.${{ env.REPO_ALIAS }} ${{ secrets.TEST_PYPI_TOKEN }}
+          poetry publish -r ${{ env.REPO_ALIAS }} --build
+
+          # Add Success Summary
+          NAME=${{ steps.check_version.outputs.pkg_name }}
+          VER=${{ steps.check_version.outputs.pkg_ver }}
+          echo "### ✅ Success: Published $NAME v$VER" >> $GITHUB_STEP_SUMMARY
+          echo "View your package on TestPyPI: [rz-sample](https://test.pypi.org/project/rz-sample/)" >> $GITHUB_STEP_SUMMARY