Release v3.4.0 #235

	name: Build and Publish

	on:
	workflow_dispatch:
	push:
	branches:
	- main
	pull_request:
	types:
	- opened
	- reopened
	- synchronize
	- labeled
	release:
	types:
	- released

	jobs:
	checks:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: DeterminateSystems/nix-installer-action@main
	with:
	determinate: true
	- uses: DeterminateSystems/flakehub-cache-action@main

	- name: Check external links
	run: \|
	nix develop --command \
	lychee README.md

	test-modules:
	strategy:
	matrix:
	os: [ubuntu-latest, macos-latest]
	runs-on: ${{ matrix.os }}
	permissions:
	contents: read
	id-token: write
	steps:
	- uses: actions/checkout@v4
	- uses: DeterminateSystems/nix-installer-action@main
	with:
	determinate: true
	- uses: DeterminateSystems/flakehub-cache-action@main
	- run: \|
	set -eux

	cd tests
	rm -f flake.lock
	nix flake lock
	nix flake check
	- run: \|
	set -eux

	nix flake lock
	git diff --exit-code

	success:
	needs: [checks, test-modules]
	runs-on: ubuntu-latest
	steps:
	- run: true

	publish:
	if: (!github.repository.fork && (github.ref == format('refs/heads/{0}', github.event.repository.default_branch) \|\| startsWith(github.ref, 'refs/tags/')))
	environment: ${{ github.event_name == 'release' && 'production' \|\| '' }}
	needs: [success]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	id-token: write
	steps:
	- uses: actions/checkout@v4
	- uses: DeterminateSystems/nix-installer-action@main
	- uses: "DeterminateSystems/flakehub-push@main"
	with:
	rolling: ${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
	visibility: "unlisted"
	tag: "${{ github.ref_name }}"

Provide feedback