Merge pull request #127 from retentioneering/ci/release-version-guard

Bump version to 5.2.0 and guard the tag/pyproject mismatch

Author: wowone

.github/workflows/release.yml

@@ -45,6 +45,21 @@ jobs:
       - name: Build sdist and wheel
         run: uv build
 
+      # The build takes its version from pyproject.toml, not from the tag
+      # (ADR-0011: no dynamic versioning), so a tag pushed ahead of the version
+      # bump would silently rebuild the previous release. Catch that here
+      # rather than at `uv publish`, which fails with an opaque "File already
+      # exists" from PyPI. Assumes the tag is already a PEP 440-normalized
+      # version (`v5.2.0`, `v5.2.0rc1` -- not `v5.2.0-rc1`).
+      - name: Verify the built version matches the tag
+        run: |
+          set -e
+          VERSION="${GITHUB_REF_NAME#v}"
+          if [ ! -f "dist/retentioneering-${VERSION}-py3-none-any.whl" ]; then
+            echo "::error::Tag ${GITHUB_REF_NAME} doesn't match pyproject.toml's version -- built $(ls dist/*.whl). Bump pyproject.toml to ${VERSION}, then re-tag."
+            exit 1
+          fi
+
       - name: Verify the wheel embeds the JS bundle
         run: |
           set -e

Makefile

@@ -63,6 +63,14 @@ release:
 	       "rename '## [Unreleased]' to '## [$(VERSION)] - $$(date +%Y-%m-%d)' (and add a fresh" \
 	       "empty '## [Unreleased]' above it), then land that on master before releasing."; exit 1; \
 	fi
+	@# release.yml builds whatever pyproject.toml says, not what the tag says
+	@# (ADR-0011: no dynamic versioning). Without this check a tag pushed
+	@# ahead of the version bump republishes the *previous* version and the
+	@# run dies on PyPI's "File already exists".
+	@if ! grep -q '^version = "$(VERSION)"$$' pyproject.toml; then \
+	  echo "pyproject.toml says $$(grep -m1 '^version = ' pyproject.toml | cut -d'"' -f2), not $(VERSION)" \
+	       "-- bump it in the version-bump PR and land that on master before releasing."; exit 1; \
+	fi
 	git tag -a v$(VERSION) -m "Release v$(VERSION)"
 	git push origin v$(VERSION)
 	@echo "✓ Pushed tag v$(VERSION) -- release.yml will build and publish to PyPI."

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "retentioneering"
-version = "5.1.0"
+version = "5.2.0"
 authors = [
   { name = "Retentioneering User Trajectory Analysis Lab", email = "retentioneering@gmail.com" },
 ]