python-package-develop.yml

name: Labelbox Python SDK Staging (Develop)

on:
 push:
 branches: [develop]
 pull_request:
 branches: [develop]

concurrency:
 group: ${{ github.workflow }}-${{ github.ref }}
 cancel-in-progress: true

permissions:
 id-token: write

jobs:
 path-filter:
 runs-on: ubuntu-latest
 outputs:
 labelbox: ${{ steps.filter.outputs.labelbox }}
 steps:
 - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 with:
 ref: ${{ github.head_ref }}
 - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
 id: filter
 with:
 filters: |
 labelbox:
 - 'libs/labelbox/**'
 get_sdk_versions:
 runs-on: ubuntu-latest
 outputs:
 sdk_versions: ${{ steps.get_sdk_versions.outputs.sdk_versions }}
 steps:
 - name: Checkout repository
 uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 with:
 ref: ${{ github.event.repository.default_branch }}
 
 - name: Fetch tags
 run: git fetch --tags
 
 - name: Get Latest SDK versions
 id: get_sdk_versions
 run: |
 sdk_versions=$(git tag --list --sort=-version:refname "v.*" | head -n 4 | jq -R -s -c 'split("\n")[:-1]')
 if [ -z "$sdk_versions" ]; then
 echo "No tags found"
 exit 1
 fi
 echo "sdk_versions=$sdk_versions"
 echo "sdk_versions=$sdk_versions" >> $GITHUB_OUTPUT 
 build:
 needs: ['path-filter', 'get_sdk_versions']
 if: ${{ needs.path-filter.outputs.labelbox == 'true' }}
 strategy:
 fail-fast: false
 matrix:
 include:
 - python-version: "3.9"
 api-key: STAGING_API_KEY_ORG_CMOI3PQ7801GM070D4TPG7FMH 
 da-test-key: DA_GCP_LABELBOX_API_KEY
 - python-version: "3.10"
 api-key: STAGING_API_KEY_ORG_CMOI3PQ7801GM070D4TPG7FMH
 da-test-key: DA_GCP_LABELBOX_API_KEY
 - python-version: "3.11"
 api-key: STAGING_API_KEY_ORG_CMOI3PQ7801GM070D4TPG7FMH
 da-test-key: DA_GCP_LABELBOX_API_KEY
 - python-version: "3.12"
 api-key: STAGING_API_KEY_ORG_CMOI3PQ7801GM070D4TPG7FMH
 da-test-key: DA_GCP_LABELBOX_API_KEY 
 - python-version: "3.13"
 api-key: STAGING_API_KEY_ORG_CMOI3PQ7801GM070D4TPG7FMH
 da-test-key: DA_GCP_LABELBOX_API_KEY
 uses: ./.github/workflows/python-package-shared.yml
 with:
 python-version: ${{ matrix.python-version }}
 api-key: ${{ matrix.api-key }}
 da-test-key: ${{ matrix.da-test-key }}
 sdk-version: ${{ matrix.sdk-version }}
 fixture-profile: true
 test-env: 'staging'
 secrets: inherit
 test-pypi:
 runs-on: ubuntu-latest
 needs: ['path-filter']
 continue-on-error: true
 environment: 
 name: Test-PyPI
 url: 'https://test.pypi.org/p/labelbox-test'
 permissions:
 # IMPORTANT: this permission is mandatory for trusted publishing
 id-token: write
 steps:
 - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 with:
 ref: ${{ github.head_ref }}
 - uses: ./.github/actions/python-package-shared-setup
 with:
 rye-version: ${{ vars.RYE_VERSION }}
 python-version: '3.9'
 - name: Create build
 id: create-build
 working-directory: libs/labelbox
 run: |
 VERSION=$(date +"%Y.%m.%d.%H.%M")
 echo "pip install --index-url https://test.pypi.org/simple/ --extra-index-url=https://pypi.org/simple/ labelbox-test@$VERSION" >> "$GITHUB_STEP_SUMMARY"
 rye version "$VERSION"
 rye run toml set --toml-path pyproject.toml project.name labelbox-test
 rye build
 - name: Publish package distributions to Test PyPI
 uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
 with:
 packages-dir: dist/
 repository-url: https://test.pypi.org/legacy/
 test-container:
 runs-on: ubuntu-latest 
 needs: ['path-filter']
 continue-on-error: true
 permissions:
 # IMPORTANT: this permission is mandatory for trusted publishing
 packages: write
 env:
 CONTAINER_IMAGE: "ghcr.io/${{ github.repository }}"
 steps:
 - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 with:
 ref: ${{ github.head_ref }}

 - name: downcase CONTAINER_IMAGE
 run: |
 echo "CONTAINER_IMAGE=${CONTAINER_IMAGE,,}" >> ${GITHUB_ENV}

 - name: Set up Docker Buildx
 uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
 - name: Log in to the Container registry
 uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
 with:
 registry: ghcr.io
 username: ${{ github.actor }}
 password: ${{ secrets.GITHUB_TOKEN }}
 
 - name: Build and push (Develop)
 if: github.event_name == 'push'
 uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
 with:
 context: .
 file: ./libs/labelbox/Dockerfile
 github-token: ${{ secrets.GITHUB_TOKEN }}
 push: true
 
 platforms: |
 linux/amd64
 linux/arm64

 tags: |
 ${{ env.CONTAINER_IMAGE }}:develop
 ${{ env.CONTAINER_IMAGE }}:${{ github.sha }}
 
 - name: Build and push (Pull Request)
 if: github.event_name == 'pull_request'
 uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
 with:
 context: .
 file: ./libs/labelbox/Dockerfile
 github-token: ${{ secrets.GITHUB_TOKEN }}
 push: true
 
 platforms: |
 linux/amd64
 linux/arm64

 tags: |
 ${{ env.CONTAINER_IMAGE }}:${{ github.sha }}