ci.yml

name: CI

on:
  push:
    tags: ["v*.*.*"]
    branches: [main]
  pull_request:
    branches: [main]

env:
  POETRY_CACHE_DIR: ${{ github.workspace }}/.cache/poetry

jobs:
  pre-commit:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/workflows/actions/python
        with:
          python-version: "3.11"

      - run: make install

      - uses: pre-commit/action@v3.0.1

  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/workflows/actions/python
        with:
          python-version: "3.11"

      - run: echo "::add-matcher::.github/matcher-python.json"
      - run: make lint

  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        os: [ubuntu-latest]
        python-version: ["3.9", "3.10", "3.11", "3.12"]

    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/workflows/actions/python
        with:
          python-version: ${{ matrix.python-version }}

      - run: |
          sudo apt-get update
          sudo apt-get install -y ffmpeg

      - if: matrix.python-version == '3.11'
        run: |
          sudo apt-get install -y libxml2-dev libxslt1-dev

      - run: make test

  publish:
    needs: [pre-commit, lint, test]
    runs-on: ubuntu-latest
    if: startsWith(github.ref, 'refs/tags')
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/workflows/actions/python
        with:
          python-version: "3.11"

      - run: >
          POETRY_PYPI_TOKEN_PYPI=${{ secrets.PYPI_TOKEN }}
          make ci-publish

  container:
    needs: [pre-commit, lint, test]
    runs-on: ubuntu-latest

    env:
      IMAGE_NAME: ${{ github.repository }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to the Docker Container registry
        if: github.repository_owner == 'jooola' && startsWith(github.ref, 'refs/tags')
        uses: docker/login-action@v3
        with:
          registry: docker.io
          username: ${{ secrets.DOCKERHUB_USER }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Login to the Github Container registry
        if: github.repository_owner == 'jooola' && startsWith(github.ref, 'refs/tags')
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels)
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: |
            docker.io/${{ env.IMAGE_NAME }}
            ghcr.io/${{ env.IMAGE_NAME }}

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .
          push: ${{ github.repository_owner == 'jooola' && startsWith(github.ref, 'refs/tags') }}
          no-cache: ${{ github.repository_owner == 'jooola' && startsWith(github.ref, 'refs/tags') }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          cache-from: type=gha,scope=container
          cache-to: type=gha,scope=container,mode=max