Merge pull request #221 from fairagro/feature/publish_pypi_packages

Feature/publish pypi packages

Author: Zalfsten

.github/workflows/feature-pull-request.yml

@@ -35,10 +35,10 @@ jobs:
   code-quality:
     name: Code Quality
     needs: detect-changes
-    if: needs.detect-changes.outputs.code == 'true'
     uses: ./.github/workflows/reusable-code-quality.yml
     with:
       components: '["api"]'
+      skip: ${{ needs.detect-changes.outputs.code != 'true' }}
     secrets: inherit
 
   build:
@@ -52,10 +52,11 @@ jobs:
 
   check:
     name: Check
-    needs: build
-    if: needs.build.result == 'success'
+    needs: [detect-changes, build]
+    if: always() && needs.detect-changes.result == 'success'
     uses: ./.github/workflows/reusable-check.yml
     with:
-      version: ${{ needs.build.outputs.version }}
+      version: ${{ needs.build.outputs.version || '' }}
       components: '["api"]'
+      skip: ${{ needs.detect-changes.outputs.code != 'true' }}
     secrets: inherit

.github/workflows/pre-release.yml

@@ -39,6 +39,7 @@ jobs:
     uses: ./.github/workflows/reusable-release.yml
     with:
       version: ${{ needs.build.outputs.version }}
+      pep440_version: ${{ needs.build.outputs.pep440_version }}
       components: '["api"]'
       release_type: 'feature'
       create_github_release: false

.github/workflows/release.yml

@@ -62,6 +62,7 @@ jobs:
     uses: ./.github/workflows/reusable-release.yml
     with:
       version: ${{ needs.build.outputs.version }}
+      pep440_version: ${{ needs.build.outputs.pep440_version }}
       components: '["api"]'
       release_type: 'final'
       tag_prefix: 'docker-v'

.github/workflows/reusable-build.yml

@@ -184,3 +184,32 @@ jobs:
           name: sbom-${{ matrix.component }}-${{ needs.version.outputs.version }}
           path: sboms/sbom-${{ matrix.component }}.spdx.json
           retention-days: 1
+
+  python-build:
+    name: Python Package Build
+    needs: version
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: astral-sh/setup-uv@v5
+
+      - name: Build Python packages (wheels + sdists)
+        env:
+          SETUPTOOLS_SCM_PRETEND_VERSION: ${{ needs.version.outputs.pep440_version }}
+        run: |
+          mkdir -p dist
+          uv build --package fairagro-middleware-shared --out-dir dist
+          uv build --package fairagro-middleware-api-client --out-dir dist
+
+      - name: Upload Python packages artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: python-packages-${{ needs.version.outputs.version }}
+          path: dist/
+          retention-days: 1

.github/workflows/reusable-check.yml

@@ -6,15 +6,21 @@ permissions:
 on:
   workflow_call:
     inputs:
-      version:
+      version:  # required if skip is false, but allowing default to enable skipping both checks when no code changes
         description: 'Version calculated in Build phase'
-        required: true
+        required: false
         type: string
+        default: ''
       components:
         description: 'A JSON string array of components to check'
         required: false
         type: string
         default: '["api"]'
+      skip:
+        description: 'Exit immediately with success without running any checks (for PRs with no code changes)'
+        required: false
+        type: boolean
+        default: false
 
 env:
   IMAGE_BASE_NAME: ${{ vars.IMAGE_BASE_NAME || 'fairagro-advanced-middleware' }}
@@ -23,6 +29,7 @@ env:
 jobs:
   licence-check:
     name: Licence Check
+    if: ${{ !inputs.skip }}
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -53,6 +60,7 @@ jobs:
 
   security-check:
     name: Security Check
+    if: ${{ !inputs.skip }}
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -119,21 +127,29 @@ jobs:
       contents: read
 
     steps:
+      - name: No code changes — skipping checks
+        if: ${{ inputs.skip }}
+        run: echo "No code files changed. Exiting with success."
+
       - name: Checkout code
+        if: ${{ !inputs.skip }}
         uses: actions/checkout@v4
 
       - name: Download Docker image artifact
+        if: ${{ !inputs.skip }}
         uses: actions/download-artifact@v4
         with:
           name: docker-image-${{ matrix.component }}-${{ inputs.version }}
 
       - name: Load Docker image
+        if: ${{ !inputs.skip }}
         run: |
           docker load < docker-image-${{ matrix.component }}.tar.gz
           IMAGE_TAG="local/${{ env.IMAGE_BASE_NAME }}-${{ matrix.component }}:${{ inputs.version }}"
           echo "IMAGE_TAG=$IMAGE_TAG" >> $GITHUB_ENV
 
       - name: Run Container Structure Tests
+        if: ${{ !inputs.skip }}
         uses: plexsystems/container-structure-test-action@v0.3.0
         with:
           image: ${{ env.IMAGE_TAG }}

.github/workflows/reusable-code-quality.yml

@@ -11,6 +11,11 @@ on:
         required: false
         type: string
         default: '["api"]'
+      skip:
+        description: 'Exit immediately with success without running any checks (for PRs with no code changes)'
+        required: false
+        type: boolean
+        default: false
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
@@ -26,28 +31,38 @@ jobs:
       contents: read
 
     steps:
+      - name: No code changes — skipping checks
+        if: ${{ inputs.skip }}
+        run: echo "No code files changed. Exiting with success."
+
       - name: Checkout code
+        if: ${{ !inputs.skip }}
         uses: actions/checkout@v4
 
       - name: Install uv
+        if: ${{ !inputs.skip }}
         uses: astral-sh/setup-uv@v4
         with:
           version: "latest"
 
       - name: Set up Python ${{ matrix.python-version }}
+        if: ${{ !inputs.skip }}
         run: uv python install ${{ matrix.python-version }}
 
       - name: Install dependencies
+        if: ${{ !inputs.skip }}
         run: uv sync --dev --all-packages
 
       - name: Code formatting and linting
+        if: ${{ !inputs.skip }}
         run: |
           uv run ruff format --check --diff middleware/
           uv run ruff check middleware/
           uv run pylint middleware/
           uv run mypy middleware/
 
       - name: Security check with bandit
+        if: ${{ !inputs.skip }}
         run: |
           uv run bandit -r middleware/ -c .bandit -f json -o bandit-report.json || true
           python3 -c "
@@ -67,4 +82,5 @@ jobs:
           "
 
       - name: Run tests
+        if: ${{ !inputs.skip }}
         run: uv run pytest middleware/ -v --junitxml=pytest-report.xml