Fix release pipeline: run publish in auto-release workflow

Events created by GITHUB_TOKEN don't trigger other workflows, so the
auto-release -> release.yml chain never fired. Fix by moving PyPI
publish and Docker push jobs directly into auto-release.yml.

release.yml is now a manual fallback (workflow_dispatch) for re-running
publishes without re-creating a release.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: tomas-gajarsky

.github/workflows/auto-release.yml

@@ -11,30 +11,37 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+    outputs:
+      version: ${{ steps.version.outputs.VERSION }}
+      tag: ${{ steps.version.outputs.TAG }}
+      skipped: ${{ steps.check_tag.outputs.SKIP }}
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Read version
+        id: version
         run: |
           VERSION=$(cat ./version | tr -d '[:space:]')
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+          echo "TAG=v$VERSION" >> $GITHUB_OUTPUT
           echo "VERSION=$VERSION" >> $GITHUB_ENV
           echo "TAG=v$VERSION" >> $GITHUB_ENV
 
       - name: Check if tag already exists
+        id: check_tag
         run: |
           if git rev-parse "${{ env.TAG }}" >/dev/null 2>&1; then
             echo "Tag ${{ env.TAG }} already exists, skipping release."
-            echo "SKIP=true" >> $GITHUB_ENV
+            echo "SKIP=true" >> $GITHUB_OUTPUT
           else
-            echo "SKIP=false" >> $GITHUB_ENV
+            echo "SKIP=false" >> $GITHUB_OUTPUT
           fi
 
       - name: Extract changelog for this version
-        if: env.SKIP == 'false'
+        if: steps.check_tag.outputs.SKIP == 'false'
         run: |
-          # Extract the section between "## $VERSION" and the next "## "
           CHANGELOG=$(awk -v ver="${VERSION}" '
             /^## / {
               if (found) exit
@@ -43,18 +50,74 @@ jobs:
             found { print }
           ' CHANGELOG.md | sed '/^$/N;/^\n$/d')
 
-          # Write to file for the release body (handles multiline safely)
           echo "$CHANGELOG" > /tmp/release_notes.md
-
           echo "Changelog extracted:"
           cat /tmp/release_notes.md
 
       - name: Create GitHub Release
-        if: env.SKIP == 'false'
+        if: steps.check_tag.outputs.SKIP == 'false'
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
           gh release create "${{ env.TAG }}" \
             --title "${{ env.TAG }}" \
             --notes-file /tmp/release_notes.md \
             --target main
+
+  pypi-publish:
+    needs: create-release
+    if: needs.create-release.outputs.skipped == 'false'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.10"
+
+      - name: Install build dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install build twine
+
+      - name: Build package
+        run: |
+          python -m build
+
+      - name: Publish package to PyPI
+        env:
+          TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
+          TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}
+        run: |
+          twine upload -u $TWINE_USERNAME -p $TWINE_PASSWORD dist/*
+
+  docker-push:
+    needs: create-release
+    if: needs.create-release.outputs.skipped == 'false'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set VERSION variable
+        run: echo "VERSION=$(cat ./version | tr -d '[:space:]')" >> $GITHUB_ENV
+
+      - name: Login to Docker Hub
+        env:
+          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+        run: docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD docker.io
+
+      - name: Build and push facetorch
+        run: |
+          docker compose build facetorch
+          docker tag tomasgajarsky/facetorch:latest tomasgajarsky/facetorch:${{ env.VERSION }}
+          docker push tomasgajarsky/facetorch:latest
+          docker push tomasgajarsky/facetorch:${{ env.VERSION }}
+
+      - name: Build and push facetorch-gpu
+        run: |
+          docker compose build facetorch-gpu-no-device
+          docker tag tomasgajarsky/facetorch-gpu:latest tomasgajarsky/facetorch-gpu:${{ env.VERSION }}
+          docker push tomasgajarsky/facetorch-gpu:latest
+          docker push tomasgajarsky/facetorch-gpu:${{ env.VERSION }}

.github/workflows/release.yml

@@ -1,28 +1,37 @@
 name: release
 
 on:
-  release:
-    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Release tag (e.g., v0.6.1). Defaults to version file."
+        required: false
 
 jobs:
-  validate-version:
+  resolve-version:
     runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.resolve.outputs.VERSION }}
+      tag: ${{ steps.resolve.outputs.TAG }}
     steps:
       - uses: actions/checkout@v4
 
-      - name: Validate release tag matches version file
+      - name: Resolve version
+        id: resolve
         run: |
-          FILE_VERSION=$(cat ./version | tr -d '[:space:]')
-          TAG_VERSION="${GITHUB_REF_NAME#v}"
-          if [ "$FILE_VERSION" != "$TAG_VERSION" ]; then
-            echo "::error::Version mismatch: version file says '$FILE_VERSION' but release tag is '$TAG_VERSION'"
-            echo "Please ensure the version file matches the release tag (with or without 'v' prefix)."
-            exit 1
+          if [ -n "${{ github.event.inputs.tag }}" ]; then
+            TAG="${{ github.event.inputs.tag }}"
+          else
+            FILE_VERSION=$(cat ./version | tr -d '[:space:]')
+            TAG="v$FILE_VERSION"
           fi
-          echo "Version validated: $FILE_VERSION"
+          VERSION="${TAG#v}"
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+          echo "TAG=$TAG" >> $GITHUB_OUTPUT
+          echo "Releasing version: $VERSION (tag: $TAG)"
 
   pypi-publish:
-    needs: validate-version
+    needs: resolve-version
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -49,13 +58,13 @@ jobs:
           twine upload -u $TWINE_USERNAME -p $TWINE_PASSWORD dist/*
 
   docker-push:
-    needs: validate-version
+    needs: resolve-version
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
 
       - name: Set VERSION variable
-        run: echo "VERSION=$(cat ./version | tr -d '[:space:]')" >> $GITHUB_ENV
+        run: echo "VERSION=${{ needs.resolve-version.outputs.version }}" >> $GITHUB_ENV
 
       - name: Login to Docker Hub
         env: