statsig-python.yml

# This file generated and copied from statsig-pyo3
# To update, see statsig-pyo3/.github/workflows/CI.yml

name: Statsig Python

on:
  push:
    branches:
      - main
      - master
    tags:
      - '*'
  pull_request:
  workflow_dispatch:
  release:
    types: [released, prereleased]

permissions:
  contents: read

jobs:
  linux:
    strategy:
      fail-fast: false
      matrix:
        config:
          - distro: debian
            arch: x86_64
            arch_alias: amd64
            runner: ubuntu-latest
            always_build: true

          - distro: debian
            arch: aarch64
            arch_alias: arm64
            runner: statsig-ubuntu-arm64
            always_build: true

          - distro: alpine
            arch: x86_64
            arch_alias: amd64
            runner: ubuntu-latest
            always_build: true

          - distro: alpine
            arch: aarch64
            arch_alias: arm64
            runner: statsig-ubuntu-arm64
            always_build: true

    runs-on: ${{ matrix.config.runner }}
    timeout-minutes: 15
    env:
      SHOULD_BUILD: ${{ github.ref_name == 'main' || matrix.config.always_build || github.event_name == 'release' }}
  
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
      - uses: pnpm/action-setup@f40ffcd9367d9f12939873eb1018b921a783ffaa # v4
        with:
          version: 7.32.4

      - name: Cache Cargo
        uses: Swatinem/rust-cache@42dc69e1aa15d09112580998cf2ef0119e2e91ae # v2

      - name: Install CLI Dependencies
        run: cd cli && pnpm install

      - name: Build Docker Image
        if: ${{ env.SHOULD_BUILD == 'true' }}
        id: build-docker-image
        uses: ./.github/actions/build-docker-image
        with:
          dockerhub_username: ${{ secrets.DOCKERHUB_USERNAME }}
          dockerhub_password: ${{ secrets.DOCKERHUB_TOKEN }}
          dockerfile_path: cli/src/docker/Dockerfile.${{ matrix.config.distro }}
          docker_image_tag: statsig/server-core-${{ matrix.config.distro }}-${{ matrix.config.arch }}
          gh_token: ${{ secrets.KONG_FINE_GRAINED_REPO_PAT }}
          platform: linux/${{ matrix.config.arch_alias }}

      - name: Build for Release
        if: ${{ env.SHOULD_BUILD == 'true' }}
        shell: 'script --return --quiet --log-out /dev/null --command "bash -e {0}"'
        run: ./tore py-build --distro ${{ matrix.config.distro }} --arch ${{ matrix.config.arch }} --release --out dist --skip-docker-build

      - name: Upload wheels
        if: ${{ env.SHOULD_BUILD == 'true' }}
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        with:
          name: wheels-${{ matrix.config.distro }}-${{ matrix.config.arch }}
          if-no-files-found: error
          path: statsig-pyo3/dist

  macos:
    runs-on: ${{ matrix.platform.runner }}
    strategy:
      matrix:
        platform:
          - runner: macos-13
            target: x86_64

          - runner: macos-14
            target: aarch64
          
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
        with:
          python-version: 3.x

      - name: Cache Cargo
        uses: Swatinem/rust-cache@42dc69e1aa15d09112580998cf2ef0119e2e91ae # v2

      - name: Build wheels
        uses: PyO3/maturin-action@423a6347767a8b16e65c2a7a7042e4a921528da8 # v1
        with:
          working-directory: statsig-pyo3
          target: ${{ matrix.platform.target }}
          args: --release --out dist
          sccache: 'true'

      - name: Upload wheels
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        with:
          name: wheels-macos-${{ matrix.platform.target }}
          if-no-files-found: error
          path: statsig-pyo3/dist

  windows:
    runs-on: ${{ matrix.platform.runner }}
    strategy:
      matrix:
        platform:
          - runner: windows-latest
            target: x64

          - runner: windows-latest
            target: x86
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
        with:
          python-version: 3.x
          architecture: ${{ matrix.platform.target }}
      
      - name: Build wheels
        uses: PyO3/maturin-action@423a6347767a8b16e65c2a7a7042e4a921528da8 # v1
        with:
          working-directory: statsig-pyo3
          target: ${{ matrix.platform.target }}
          args: --release --out dist
          sccache: 'true'
     
      - name: Upload wheels
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        with:
          name: wheels-windows-${{ matrix.platform.target }}
          if-no-files-found: error
          path: statsig-pyo3/dist

  sdist:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

      - name: Build sdist
        uses: PyO3/maturin-action@423a6347767a8b16e65c2a7a7042e4a921528da8 # v1
        with:
          working-directory: statsig-pyo3
          command: sdist
          args: --out dist

      - name: Upload sdist
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        with:
          name: wheels-sdist
          if-no-files-found: error
          path: statsig-pyo3/dist

  release:
    name: Release
    runs-on: ubuntu-latest
    needs: [linux, macos, windows, sdist]
    if: ${{ github.event_name == 'release' }}
    permissions:
      id-token: write
      contents: write
      attestations: write
    steps:
      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
      
      - name: Generate artifact attestation
        uses: actions/attest-build-provenance@92c65d2898f1f53cfdc910b962cecff86e7f8fcc # v1
        with:
          subject-path: 'wheels-*/*'
      
      - name: Publish to PyPI
        uses: PyO3/maturin-action@423a6347767a8b16e65c2a7a7042e4a921528da8 # v1
        env:
          MATURIN_PYPI_TOKEN: ${{ secrets.STATSIG_PYPI_PROD_TOKEN }}
          MATURIN_REPOSITORY: pypi
          # MATURIN_PYPI_TOKEN: ${{ secrets.SIGTAT_PYPI_TEST_TOKEN }}
          # MATURIN_REPOSITORY: testpypi
        with:
          command: upload
          args: --non-interactive --skip-existing wheels-*/*