publish.yaml

name: publish

on:
  push:
    branches: [main]

# only read-only for GITHUB_TOKEN
permissions:
  contents: read

jobs:
  publish_audit:
    name: audit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: rustsec/audit-check@v1.4.1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

  publish_test:
    name: test on ${{ matrix.os }} / stable
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v4
      - name: Install stable
        uses: dtolnay/rust-toolchain@stable
      - name: cargo test --locked
        run: cargo test --locked --all-features

  publish:
    name: publish to crates.io
    needs:
      - publish_audit
      - publish_test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - name: Install cargo-release
        run: cargo install cargo-release
      - name: cargo login
        run: cargo login ${{ secrets.CRATES_IO_TOKEN }}
      - name: Publish
        run: |-
          cargo release \
            publish \
            --all-features \
            --allow-branch main \
            --no-confirm \
            --execute