chore(release): bump workspace packages 0.0.1a7 -> 0.0.1a8 #12

	name: release

	on:
	push:
	tags:
	- "v*"

	permissions:
	contents: read
	id-token: write
	attestations: write

	jobs:
	publish:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6

	- name: Set up Python 3.14
	uses: actions/setup-python@v6
	with:
	python-version: "3.14"

	- name: Install uv
	uses: astral-sh/setup-uv@v7
	with:
	enable-cache: true

	- name: Resolve release metadata
	id: release
	run: \|
	python - <<'PY' "${GITHUB_REF_NAME}" >> "${GITHUB_OUTPUT}"
	import json
	import pathlib
	import sys

	sys.path.insert(0, str(pathlib.Path("scripts/ci").resolve()))
	import package_tools

	metadata = package_tools.release_metadata(sys.argv[1])
	for key, value in metadata.items():
	print(f"{key}={value}")
	PY

	- name: Install workspace dependencies
	run: uv sync --all-packages --all-extras --group dev

	- name: Validate lockstep versions
	run: uv run python scripts/ci/package_tools.py check-versions

	- name: Build publishable packages
	run: \|
	rm -rf dist
	mkdir -p dist
	while IFS= read -r package; do
	uv build --package "$package" --out-dir dist
	done < <(uv run python scripts/ci/package_tools.py print-packages)

	- name: Validate distributions with twine
	run: uvx twine check dist/*

	- name: Smoke test publishable packages
	run: \|
	while IFS= read -r package; do
	uv run python scripts/ci/package_tools.py smoke "$package" --dist-dir dist
	done < <(uv run python scripts/ci/package_tools.py print-packages)

	- name: Publish packages
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	attestations: true
	packages-dir: dist/
	skip-existing: true

Provide feedback