build-m1-wheel.yml

name: Build M1 Wheels

on:
  push:
    branches:
      - main
    tags:
      - '**'
  pull_request:
    branches:
      - '**'

concurrency:
  # SHA is added to the end if on `main` to let all main workflows run
  group: ${{ github.ref }}-${{ github.workflow }}-${{ github.event_name }}-${{ (github.ref == 'refs/heads/main') && github.sha || '' }}
  cancel-in-progress: true

jobs:
  build_wheels:
    name: Build wheel on Mac M1
    runs-on: [m1]
    strategy:
      fail-fast: false

    steps:
    - name: Checkout code
      uses: actions/checkout@v3
      with:
        fetch-depth: 0

    - name: Brew update Python
      run: |
        arch -arm64 brew install python@3.9
        arch -arm64 brew install python@3.10

    - name: Build m1 wheels for 3.9 and 3.10
      run: |
        rm -rf venv
        arch -arm64 $(brew --prefix python@3.9)/libexec/bin/python -m venv venv
        . venv/bin/activate
        arch -arm64 pip wheel -w dist --no-deps .
        arch -arm64 pip install delocate
        arch -arm64 delocate-wheel -v dist/*cp39*.whl
        deactivate
        rm -rf venv
        arch -arm64 $(brew --prefix python@3.10)/libexec/bin/python -m venv venv
        . venv/bin/activate
        arch -arm64 pip wheel -w dist --no-deps .
        arch -arm64 pip install delocate
        arch -arm64 delocate-wheel -v dist/*cp310*.whl
        deactivate
        rm -rf venv

    - name: Test wheel
      run: |
        rm -rf venv
        arch -arm64 $(brew --prefix python@3.9)/libexec/bin/python -m venv venv
        . venv/bin/activate
        arch -arm64 pip install ./dist/*cp39*.whl
        arch -arm64 pip install pytest
        arch -arm64 ./venv/bin/pytest -v ./python-bindings/test.py
        deactivate
        rm -rf venv
        arch -arm64 $(brew --prefix python@3.10)/libexec/bin/python -m venv venv
        . venv/bin/activate
        arch -arm64 pip install ./dist/*cp310*.whl
        arch -arm64 pip install pytest
        arch -arm64 ./venv/bin/pytest -v ./python-bindings/test.py
        deactivate
        rm -rf venv

    - name: Create sha256 hash
      run: |
        mkdir hashes
        cd ./dist
        shasum -a 256 *
        shasum -a 256 * > ../hashes/blspy-wheel-m1-sha256.txt

    - name: Upload hashes
      uses: actions/upload-artifact@v2
      with:
        name: blspy-hashes
        path: ./hashes

    - name: Upload wheels
      uses: actions/upload-artifact@v2
      with:
        name: wheels
        path: ./dist

    - name: Test for secrets access
      id: check_secrets
      shell: bash
      run: |
        unset HAS_SECRET
        if [ -n "$SECRET" ]; then HAS_SECRET='true' ; fi
        echo ::set-output name=HAS_SECRET::${HAS_SECRET}
      env:
        SECRET: "${{ secrets.test_pypi_password }}"

    - name: Install twine
      run: arch -arm64 pip install twine

    - name: Publish distribution to PyPI
      if: startsWith(github.event.ref, 'refs/tags') && steps.check_secrets.outputs.HAS_SECRET
      env:
        TWINE_USERNAME: __token__
        TWINE_NON_INTERACTIVE: 1
        TWINE_PASSWORD: ${{ secrets.pypi_password }}
      run: arch -arm64 twine upload --non-interactive --skip-existing --verbose 'dist/*'

    - name: Publish distribution to Test PyPI
      if: steps.check_secrets.outputs.HAS_SECRET
      env:
        TWINE_REPOSITORY_URL: https://test.pypi.org/legacy/
        TWINE_USERNAME: __token__
        TWINE_NON_INTERACTIVE: 1
        TWINE_PASSWORD: ${{ secrets.test_pypi_password }}
      run: arch -arm64 twine upload --non-interactive --skip-existing --verbose 'dist/*'