build-shapely.yml

# SPDX-FileCopyrightText: 2026 The RISE Project
# SPDX-License-Identifier: MIT
---
# This workflow is based on: https://github.com/shapely/shapely/blob/2.1.2/.github/workflows/release.yml
name: Build shapely wheels (riscv64)

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version glob to (re)build; empty builds every version of docs/packages/shapely.yaml not released yet'
        required: false
        default: ''
  pull_request:
    branches: [main]
    paths:
      - '.github/workflows/build-shapely.yml'
      - 'docs/packages/shapely.yaml'
  push:
    branches: [main]
    paths:
      - '.github/workflows/build-shapely.yml'
      - 'docs/packages/shapely.yaml'

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

permissions:
  contents: read  # to fetch code (actions/checkout)

env:
  GEOS_VERSION: '3.13.1'
  BASEIMAGE: manylinux_2_39_riscv64
  BASETAG: '2026.08.24-1'

jobs:
  setup:
    uses: $/.github/workflows/_setup.yml
    with:
      package: shapely
      version: ${{ inputs.version }}

  build_wheels:
    needs: [setup]
    if: needs.setup.outputs.versions != '[]'
    name: Build shapely ${{ matrix.version }} ${{ matrix.python }}-manylinux_riscv64
    runs-on: ubuntu-24.04-riscv
    timeout-minutes: 300
    strategy:
      fail-fast: false
      matrix:
        version: ${{ fromJSON(needs.setup.outputs.versions) }}
        python: ["cp312", "cp313", "cp314", "cp314t"]

    env:
      SHAPELY_VERSION: ${{ matrix.version }}

    steps:
      - name: Checkout shapely ${{ env.SHAPELY_VERSION }}
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          repository: shapely/shapely
          ref: ${{ env.SHAPELY_VERSION }}
          fetch-depth: 0  # versioneer derives the version from the tag history
          persist-credentials: false

      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e  # v4.3.0
        with:
          install: true
          buildkitd-flags: --debug

      - name: Build Docker image with GEOS
        # using build-push-action (without push) to make use of cache arguments
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a  # v7.3.0
        with:
          context: .
          file: ci/Dockerfile
          platforms: linux/riscv64
          tags: ${{ env.BASEIMAGE }}_geos:${{ env.GEOS_VERSION }}
          build-args: |
            BASEIMAGE=quay.io/pypa/${{ env.BASEIMAGE }}:${{ env.BASETAG }}
            GEOS_VERSION=${{ env.GEOS_VERSION }}
          push: false
          load: true
          cache-from: type=gha,scope=${{ env.BASEIMAGE }}
          cache-to: type=gha,mode=max,scope=${{ env.BASEIMAGE }}
        env:
          BUILDKIT_PROGRESS: plain

      - name: Add GEOS LICENSE
        run: cp ci/wheelbuilder/LICENSE_GEOS .

      # cibuildwheel 4 dropped the `cpython-freethreading` enable group shapely's
      # pyproject.toml still asks for, and CIBW_ENABLE appends to that list rather
      # than replacing it, so stay on 3.x as upstream does.
      - name: Build wheels
        uses: pypa/cibuildwheel@1828c10ab37f080699c7b81cea34097c684a7074  # v4.2.0
        with:
          output-dir: wheelhouse/
          only: ${{ matrix.python }}-manylinux_riscv64
        env:
          CIBW_MANYLINUX_RISCV64_IMAGE: ${{ env.BASEIMAGE }}_geos:${{ env.GEOS_VERSION }}
          CIBW_BUILD_FRONTEND: "pip; args: --no-build-isolation"
          # 2.2.0 switched the build backend from setuptools to meson-python (mesonpy);
          # preinstalling the old setuptools/wheel pair leaves mesonpy missing and the
          # build fails with "BackendUnavailable: Cannot import 'mesonpy'" (see
          # build-beancount.yml/build-matscipy.yml for the same meson-python pattern).
          CIBW_BEFORE_BUILD: pip install cython numpy meson meson-python ninja
          CIBW_ENVIRONMENT: PIP_EXTRA_INDEX_URL=https://pypi.riseproject.dev/simple/

      - name: Check the wheel ships the GEOS licence and the compiled extensions
        run: |
          python3 - <<'EOF'
          import glob, zipfile

          names = zipfile.ZipFile(glob.glob("wheelhouse/*.whl")[0]).namelist()
          assert any(n.endswith("LICENSE_GEOS") for n in names), names
          assert any(n.endswith(".so") for n in names), names
          EOF

      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
        with:
          name: shapely-${{ env.SHAPELY_VERSION }}-${{ matrix.python }}-manylinux_riscv64
          path: wheelhouse/*.whl
          if-no-files-found: error

  publish:
    name: Publish shapely ${{ matrix.version }}
    needs: [setup, build_wheels]
    if: needs.setup.outputs.versions != '[]'
    strategy:
      fail-fast: false
      matrix:
        version: ${{ fromJSON(needs.setup.outputs.versions) }}
    permissions:
      contents: write
      pull-requests: write
    uses: $/.github/workflows/_publish-wheel.yml
    secrets:
      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
    with:
      artifact-pattern: shapely-${{ matrix.version }}-*-manylinux_riscv64