Automate PyPI releases

Author: lsaint

.github/workflows/ci.yml

@@ -60,7 +60,12 @@ jobs:
       - name: Install development tools
         run: |
           python -m pip install --upgrade pip
-          python -m pip install --editable . --requirement requirements-test.txt pyright build
+          python -m pip install \
+            --editable . \
+            --requirement requirements-test.txt \
+            --requirement requirements-docs.txt \
+            pyright \
+            build
 
       - name: Check formatting
         run: |
@@ -80,5 +85,8 @@ jobs:
             tests/integration \
             tests/fixtures/customxml/generate_fixture.py
 
+      - name: Build documentation
+        run: python -m sphinx -W --keep-going -b html docs docs/.build/html
+
       - name: Build distributions
         run: python -m build

.github/workflows/release.yml

@@ -0,0 +1,78 @@
+name: Release
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Test Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+          cache-dependency-path: requirements-test.txt
+
+      - name: Install test dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install --editable . --requirement requirements-test.txt
+
+      - name: Verify release version
+        run: |
+          package_version="$(python -c 'import docx; print(docx.__version__)')"
+          tag_version="${GITHUB_REF_NAME#v}"
+          test "$package_version" = "$tag_version"
+
+      - name: Run unit and integration tests
+        run: python -m pytest -q
+
+      - name: Run acceptance tests
+        run: python -m behave --format progress --stop --tags=-wip
+
+  publish:
+    name: Publish to PyPI
+    needs: test
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/python-docx-oss/
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Build distributions
+        run: |
+          python -m pip install --upgrade build twine
+          python -m build
+          python -m twine check dist/*
+
+      - name: Verify release version
+        run: |
+          package_version="$(python -c 'import docx; print(docx.__version__)')"
+          tag_version="${GITHUB_REF_NAME#v}"
+          test "$package_version" = "$tag_version"
+
+      - name: Publish distributions
+        uses: pypa/gh-action-pypi-publish@release/v1