ci(release): improve performance release workflow

Author: Athroniaeth

.github/workflows/main.yml .github/workflows/release.yml.github/workflows/main.yml renamed to .github/workflows/release.yml

@@ -5,67 +5,29 @@ on:
     branches: [ main ]
   push:
     branches: [ main ]
-
-    # Publish only when a version tag is pushed
-    tags:
-      - '[0-9]*'
+  # Authorize to publish manually from the Actions tab
+  release:
+    types: [published]
+  workflow_dispatch:
 
 permissions:
   contents: write     # For creating the release
   id-token: write     # Required for PyPI Trusted Publisher
   actions: read
 
 jobs:
-  test-and-lint:
-    name: Test & Lint
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        python-version: [ "3.9", "3.10", "3.11", "3.12", "3.13" ]
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Set up UV
-        uses: astral-sh/setup-uv@v6
-        with:
-          python-version: ${{ matrix.python-version }}
-
-      - name: Cache UV
-        uses: actions/cache@v4
-        with:
-          path: ~/.cache/uv
-          key: ${{ runner.os }}-uv-${{ matrix.python-version }}-${{ hashFiles('uv.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-uv-${{ matrix.python-version }}-
-
-      - name: Sync dev dependencies
-        run: uv sync --locked --all-extras --dev --no-progress -q
-
-      - name: Lint / Format / Type-check
-        run: uv run lint
-
-      - name: Run tests
-        run: uv run pytest
-
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
-        with:
-          files: ./coverage.xml
-          slug: Athroniaeth/fastapi-api-key
-          fail_ci_if_error: true
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
-
+  dev:
+    uses: ./.github/workflows/development.yml
+    secrets: inherit
 
   publish:
+    needs: dev
     name: Publish to PyPI & Create GitHub Release
     runs-on: ubuntu-latest
-    needs: [ test-and-lint ]
 
     # Runs only if on a version tag (e.g., refs/tags/1.2.3)
-    if: startsWith(github.ref, 'refs/tags/')
+    # Runs only when code is pushed to main (not on PRs)
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
     steps:
       - name: Checkout (full history for changelog/tools)
         uses: actions/checkout@v4
@@ -80,28 +42,14 @@ jobs:
       - name: Sync dev dependencies
         run: uv sync --locked --all-extras --dev --no-progress -q
 
-      - name: Lint / Format / Type-check
-        run: |
-          uv run lint
-          uv run pytest
-
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
-        with:
-          files: ./coverage.xml
-          slug: Athroniaeth/fastapi-api-key
-          fail_ci_if_error: true
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
-
       - name: Build sdist & wheel with uv
         run: uv build
 
       # Publication via OIDC (Trusted Publisher) – no secret required on GitHub side
       - name: Publish to PyPI
-        env:
-          PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-        run: uv publish --verbose
+        # env:
+        #   PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+        run: uv publish --verbose --trusted-publisher
 
       # GitHub Release with auto notes + attached artifacts (sdist/wheel)
       - name: Create GitHub Release
@@ -113,3 +61,24 @@ jobs:
           files: |
             dist/*.whl
             dist/*.tar.gz
+
+  docs:
+    name: Deploy MkDocs
+    runs-on: ubuntu-latest
+    needs: publish
+    # Runs only when code is pushed to main (when MR, not on PRs)
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up UV
+        uses: astral-sh/setup-uv@v6
+        with:
+          python-version: '3.13'
+
+      - name: Install dependencies
+        run: uv sync --locked --all-extras --dev --no-progress -q
+
+      - name: Deploy MkDocs
+        run: uv run mkdocs gh-deploy --force