main.yaml

name: Main
on:
  push:
    branches: [ "main" ]
    tags:
      - "v[0-9]+.[0-9]+.[0-9]+"
permissions:
  contents: read
  actions: read
  id-token: write
  pages: write
  security-events: write
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
jobs:
  checks:
    uses: ./.github/workflows/checks.yaml
    secrets: inherit
    with:
      sha: ${{ github.sha }}
  build-wheels:
    uses: ./.github/workflows/build-wheels.yaml
    secrets: inherit
    with:
      sha: ${{ github.sha }}
  build-docs:
    uses: ./.github/workflows/build-docs.yaml
    secrets: inherit
    with:
      sha: ${{ github.sha }}
  codeql:
    uses: ./.github/workflows/codeql.yaml
    secrets: inherit
    with:
      sha: ${{ github.sha }}
  release:
    uses: ./.github/workflows/release.yaml
    secrets: inherit
    needs:
      - build-docs
      - build-wheels
      - checks
      - codeql
    with:
      sha: ${{ github.sha }}
      publish-docs: true
      publish-wheels: true