Add a CD workflow

Author: RotemKalisch

.github/workflows/deploy.yml

@@ -0,0 +1,114 @@
+name: Build and Deploy to PyPI
+
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+
+jobs:
+  validate-tag:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Extract current tag
+        id: extract-tag
+        run: |
+          TAG_REF="${GITHUB_REF#refs/tags/}"
+          echo "tag=$TAG_REF" >> $GITHUB_OUTPUT
+
+      - name: Validate tag format
+        run: |
+          TAG=${{ steps.extract-tag.outputs.tag }}
+          if ! [[ "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "Invalid tag format. Expected vX.Y.Z"
+            exit 1
+          fi
+
+      - name: Fetch all tags
+        run: git fetch --tags --quiet
+
+      - name: Ensure tag is newer than latest
+        run: |
+          CURRENT="${{ steps.extract-tag.outputs.tag }}"
+          LATEST=$(git tag --sort=-v:refname | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$' | head -n 1)
+
+          echo "Current tag: $CURRENT"
+          echo "Latest tag: $LATEST"
+
+          if [ -n "$LATEST" ]; then
+            python3 -c "
+from packaging.version import parse
+if parse('$CURRENT'[1:]) <= parse('$LATEST'[1:]):
+    raise SystemExit('Tag ' + '$CURRENT' + ' is not newer than latest tag ' + '$LATEST')
+"
+
+  build:
+    needs: validate-tag
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v4
+        with:
+          python-version: "3.12"
+
+      - name: Install build tools
+        run: |
+          python -m pip install --upgrade pip
+          pip install build
+
+      - name: Build package
+        run: python -m build
+
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  test-pypi:
+    needs: build
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v4
+        with:
+          python-version: "3.12"
+
+      - name: Download built package
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Upload to Test PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
+          repository-url: https://test.pypi.org/legacy/
+
+  pypi:
+    needs: test-pypi
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v4
+        with:
+          python-version: "3.12"
+
+      - name: Download built package
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Upload to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}
+