Feat: Update workflows to support dynamic builds (#928)

Signed-off-by: Matthew Watkins <mwatkins@linuxfoundation.org>

Author: ModeSevenIndustrialSolutions

.github/workflows/build-test-release.yaml

@@ -43,11 +43,34 @@ jobs:
         with:
           versioning: 'semver'
 
+  dynamic-version-check:
+    name: 'Dynamic Version Check'
+    runs-on: ubuntu-24.04
+    needs: repository
+    if: needs.repository.outputs.python_project == 'true'
+    outputs:
+      dynamic_version: ${{ steps.dynamic-version.outputs.dynamic_version }}
+    permissions:
+      contents: read
+    steps:
+      # Harden the runner used by this workflow
+      - uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Check for dynamic versioning'
+        id: dynamic-version
+        # yamllint disable-line rule:line-length
+        uses: lfreleng-actions/python-dynamic-version-action@757278a7dce3add2c777305e7ec61d9e2b97ed7e # v0.1.6
+
   python-build:
     name: 'Python Build'
     needs:
       - repository
       - tag-validate
+      - dynamic-version-check
     if: needs.repository.outputs.python_project  == 'true'
     runs-on: 'ubuntu-24.04'
     outputs:
@@ -73,7 +96,11 @@ jobs:
         # yamllint disable-line rule:line-length
         uses: lfreleng-actions/python-build-action@56dd541a74b5cf9f0c5939ed98387478824720a2 # v0.1.8
         with:
-          tag: "${{ needs.tag-validate.outputs.tag }}"
+          # Only pass tag if NOT using dynamic versioning
+          # yamllint disable-line rule:line-length
+          tag: ${{ needs.dynamic-version-check.outputs.dynamic_version == 'true' && '' || needs.tag-validate.outputs.tag }}
+          # Skip version patching when using dynamic versioning
+          skip_version_patch: ${{ needs.dynamic-version-check.outputs.dynamic_version == 'true' }}
           sigstore_sign: true
           attestations: true
 

.github/workflows/build-test.yaml

@@ -33,9 +33,33 @@ jobs:
     permissions:
       contents: read
 
+  dynamic-version-check:
+    name: "Dynamic Version Check"
+    runs-on: ubuntu-24.04
+    needs: repository
+    if: needs.repository.outputs.python_project == 'true'
+    outputs:
+      dynamic_version: ${{ steps.dynamic-version.outputs.dynamic_version }}
+    permissions:
+      contents: read
+    steps:
+      # Harden the runner used by this workflow
+      - uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: "Check for dynamic versioning"
+        id: dynamic-version
+        # yamllint disable-line rule:line-length
+        uses: lfreleng-actions/python-dynamic-version-action@757278a7dce3add2c777305e7ec61d9e2b97ed7e # v0.1.6
+
   python-build:
     name: "Python Build"
-    needs: repository
+    needs:
+      - repository
+      - dynamic-version-check
     if: needs.repository.outputs.python_project  == 'true'
     runs-on: ubuntu-24.04
     outputs:
@@ -58,9 +82,12 @@ jobs:
         id: python-build
         # yamllint disable-line rule:line-length
         uses: lfreleng-actions/python-build-action@56dd541a74b5cf9f0c5939ed98387478824720a2 # v0.1.8
-
         with:
-          tag: ${{ needs.repository.outputs.build_tag }}
+          # Only pass tag if NOT using dynamic versioning
+          # yamllint disable-line rule:line-length
+          tag: ${{ needs.dynamic-version-check.outputs.dynamic_version == 'true' && '' || needs.repository.outputs.build_tag }}
+          # Skip version patching when using dynamic versioning
+          skip_version_patch: ${{ needs.dynamic-version-check.outputs.dynamic_version == 'true' }}
 
   python-tests:
     name: "Python Tests"