BLD: check tag

Author: andyfaff

.github/workflows/wheels.yml

@@ -49,18 +49,18 @@ jobs:
         # https://github.com/github/feedback/discussions/7835#discussioncomment-1769026
         buildplat:
           - [ubuntu-22.04, manylinux_x86_64, ""]
-          - [ubuntu-22.04, musllinux_x86_64, ""]
-          - [ubuntu-22.04-arm, manylinux_aarch64, ""]
-          - [ubuntu-22.04-arm, musllinux_aarch64, ""]
-          - [macos-13, macosx_x86_64, openblas]
-
-          # targeting macos >= 14. Could probably build on macos-14, but it would be a cross-compile
-          - [macos-13, macosx_x86_64, accelerate]
-          - [macos-14, macosx_arm64, openblas]
-          - [macos-14, macosx_arm64, accelerate]
-          - [windows-2022, win_amd64, ""]
-          - [windows-2022, win32, ""]
-          - [windows-11-arm, win_arm64, ""]
+#          - [ubuntu-22.04, musllinux_x86_64, ""]
+#          - [ubuntu-22.04-arm, manylinux_aarch64, ""]
+#          - [ubuntu-22.04-arm, musllinux_aarch64, ""]
+#          - [macos-13, macosx_x86_64, openblas]
+#
+#          # targeting macos >= 14. Could probably build on macos-14, but it would be a cross-compile
+#          - [macos-13, macosx_x86_64, accelerate]
+#          - [macos-14, macosx_arm64, openblas]
+#          - [macos-14, macosx_arm64, accelerate]
+#          - [windows-2022, win_amd64, ""]
+#          - [windows-2022, win32, ""]
+#          - [windows-11-arm, win_arm64, ""]
         python: ["cp311", "cp312", "cp313", "cp313t", "cp314", "cp314t", "pp311"]
         exclude:
           # Don't build PyPy 32-bit windows
@@ -239,10 +239,37 @@ jobs:
           print-hash: true
           attestations: true
 
+  check_version:
+    name: Ensure commit is tag before upload to PyPi
+
+    #if: github.event_name == 'workflow_dispatch' && github.event.inputs.environment == 'pypi'
+    needs: [build_wheels, build_sdist]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout numpy
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          repository: numpy/numpy
+          ref: ${{ env.SOURCE_REF_TO_BUILD }}
+          path: numpy-src
+          submodules: true
+          persist-credentials: false
+
+      - name: Examine git commit
+        run: |
+          pwd
+          hash=$(git describe HEAD)
+          if [[ $hash == *"-"*"-"* ]]; then
+	        echo "Build version is not a tag"
+            exit 1
+          else
+             echo "Build version is a tag"
+          fi;
+
   pypi-publish:
     name: Publish release to PyPI
     if: github.event_name == 'workflow_dispatch' && github.event.inputs.environment == 'pypi'
-    needs: [build_wheels, build_sdist]
+    needs: [check_version]
     runs-on: ubuntu-latest
     environment:
       name: pypi