slvs 3.2__tar.gz → 3.3__tar.gz

slvs-3.3/.git/HEAD

@@ -0,0 +1 @@
+30e1c3ac0beb77fe3e098315b1bb662840ddc99a

slvs-3.3/.git/refs/tags/v3.3

@@ -0,0 +1 @@
+30e1c3ac0beb77fe3e098315b1bb662840ddc99a

slvs-3.3/.github/copilot-instructions.md

@@ -0,0 +1,11 @@
+You are a senior staff engineer performing a strict code review. 
+When reviewing pull requests, prioritize checking for the following:
+1. **Reliability**: Look for things that are too specific and may cause problems or side effects outside an intended fix.
+2. **Simplicity**: Does a pull request add unnecessary complexity, or add unwanted dependencies?
+3. **Human Testing**: Is there evidence that a human built the new code and actually tried it? They should, so flag if they obviously have not.
+4. **Extraneuos Files**: Does the PR create extra files? These might be created by an AI for development but do not belong in our repository.
+5. **Attribution to AI**: We discourage commits attributed to AI agents.
+
+Keep your responses short and to the point. Do not include negative responses like "This PR does not add extra dependencies".
+We do not need to add even more text for maintainers to read. The goal here is to provide quick automated feedback to the submitter.
+Do not re-review a PR once it has been done. No updates after additional pushes to the branch. No additional responses unless asked to do so explicitly.

slvs-3.3/.github/scripts/build-macos.sh

@@ -0,0 +1,53 @@
+#!/bin/sh -xe
+
+ENABLE_SANITIZERS="OFF"
+if [ "$1" = "release" ]; then
+    BUILD_TYPE="RelWithDebInfo"
+    ENABLE_LTO="ON"
+else
+    BUILD_TYPE="Debug"
+    ENABLE_LTO="OFF"
+fi
+
+# this is an option for our Github CI only, since it doesn't have a macos arm64 image yet
+CMAKE_GENERATOR="Unix Makefiles"
+CMAKE_PREFIX_PATH=""
+ENABLE_OPENMP="ON"
+if [ "$2" = "arm64" ]; then
+    OSX_ARCHITECTURE="arm64"
+    CMAKE_PREFIX_PATH=$(find /tmp/libomp-arm64/libomp -depth 1)
+    mkdir build-arm64 || true
+    cd build-arm64
+elif [ "$2" = "x86_64" ]; then
+    OSX_ARCHITECTURE="x86_64"
+    # Homebrew no longer publishes an x86_64 libomp bottle
+    ENABLE_OPENMP="OFF"
+    mkdir build || true
+    cd build
+else
+    mkdir build || true
+    cd build
+fi
+
+if [ "$3" = "xcode" ]; then
+    CMAKE_GENERATOR="Xcode"
+fi
+
+cmake \
+    -G "${CMAKE_GENERATOR}" \
+    -D CMAKE_PREFIX_PATH="${CMAKE_PREFIX_PATH}" \
+    -D CMAKE_OSX_ARCHITECTURES="${OSX_ARCHITECTURE}" \
+    -D CMAKE_BUILD_TYPE="${BUILD_TYPE}" \
+    -D ENABLE_OPENMP="${ENABLE_OPENMP}" \
+    -D ENABLE_SANITIZERS="${ENABLE_SANITIZERS}" \
+    -D ENABLE_LTO="${ENABLE_LTO}" \
+    ..
+
+if [ "$3" = "xcode" ]; then
+    open solvespace.xcodeproj
+else
+    cmake --build . --config "${BUILD_TYPE}" -j$(sysctl -n hw.logicalcpu)
+    if [ $(uname -m) = "$2" ]; then
+        make -j$(sysctl -n hw.logicalcpu) test_solvespace
+    fi
+fi

slvs-3.3/.github/scripts/build-web.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+
+if [ "$1" = "release" ]; then
+    BUILD_TYPE="Release"
+    ENABLE_LTO="ON"
+else
+    BUILD_TYPE="Debug"
+    ENABLE_LTO="OFF"
+fi
+
+cd ..
+git clone https://github.com/emscripten-core/emsdk.git --depth 1
+cd emsdk
+./emsdk install latest
+./emsdk activate latest
+cd ../solvespace
+source ../emsdk/emsdk_env.sh
+mkdir build
+cd build
+emcmake cmake .. \
+  -DCMAKE_BUILD_TYPE="${BUILD_TYPE}" \
+  -DENABLE_CLI="OFF" \
+  -DENABLE_TESTS="OFF" \
+  -DENABLE_COVERAGE="OFF" \
+  -DENABLE_OPENMP="ON" \
+  -DENABLE_LTO="ON"
+cmake --build . --config "${BUILD_TYPE}" -j$(nproc) --target solvespace

slvs-3.3/.github/scripts/build-windows.sh

@@ -0,0 +1,55 @@
+#!/bin/sh -xe
+
+mkdir build
+cd build
+
+if [ "$1" = "release" ]; then
+    if [ "$2" = "openmp" ]; then
+        ENABLE_OPENMP="ON"
+    else
+        ENABLE_OPENMP="OFF"
+    fi
+
+    if [ "$3" = "x64" ]; then
+        PLATFORM="$3"
+    else
+        PLATFORM="Win32"
+    fi
+
+    BUILD_TYPE=RelWithDebInfo
+    cmake \
+        -G "Visual Studio 17 2022" \
+        -DCMAKE_BUILD_TYPE="${BUILD_TYPE}" \
+        -DENABLE_OPENMP="${ENABLE_OPENMP}" \
+        -DENABLE_LTO=ON \
+        -DCMAKE_GENERATOR_PLATFORM="${PLATFORM}" \
+        ..
+else
+    BUILD_TYPE=Debug
+    cmake \
+        -G "Visual Studio 17 2022" \
+        -DCMAKE_BUILD_TYPE="${BUILD_TYPE}" \
+        -DENABLE_OPENMP="ON" \
+        -DENABLE_SANITIZERS="ON" \
+        -DCMAKE_GENERATOR_PLATFORM="Win32" \
+        ..
+fi
+
+cmake --build . --config "${BUILD_TYPE}" -- -maxcpucount
+
+# Run the tests in the proper environment (required for having the ASan libraries available)
+cmake --build . --config "${BUILD_TYPE}" -t test_solvespace -- -maxcpucount
+
+if [ "$3" = "x64" ]; then
+	if [ "$2" != "openmp" ]; then
+		mv bin/$BUILD_TYPE/solvespace.exe bin/$BUILD_TYPE/solvespace_single_core_x64.exe
+	else
+		mv bin/$BUILD_TYPE/solvespace.exe bin/$BUILD_TYPE/solvespace_x64.exe
+	fi
+else
+	if [ "$2" != "openmp" ]; then
+		mv bin/$BUILD_TYPE/solvespace.exe bin/$BUILD_TYPE/solvespace_single_core_x86.exe
+    else
+        mv bin/$BUILD_TYPE/solvespace.exe bin/$BUILD_TYPE/solvespace_x86.exe
+	fi
+fi

slvs-3.3/.github/scripts/install-macos.sh

@@ -0,0 +1,16 @@
+#!/bin/sh -xe
+set -o pipefail
+
+if [ "$1" = "ci" ]; then
+    brew_cache=$(brew --cache)
+    brew fetch --bottle-tag=arm64_tahoe libomp >/dev/null
+    armloc=$(find "$brew_cache"/downloads -maxdepth 1 -name "*--libomp--*arm64_tahoe.bottle.tar.gz" -print | tail -n1)
+    [ -n "$armloc" ] || { echo "Failed to locate arm64 libomp bottle in cache" >&2; exit 1; }
+    cp "$armloc" /tmp/libomp-arm64.tar.gz
+    mkdir /tmp/libomp-arm64 || true
+    tar -xzvf /tmp/libomp-arm64.tar.gz -C /tmp/libomp-arm64
+else
+    brew install libomp
+fi
+
+git submodule update --init extlib/cairo extlib/freetype extlib/libdxfrw extlib/libpng extlib/mimalloc extlib/pixman extlib/zlib extlib/eigen

slvs-3.3/.github/scripts/sign-macos.sh

@@ -0,0 +1,86 @@
+#!/bin/bash -xe
+
+# The x86_64 slice is built without OpenMP (Homebrew no longer ships an
+# x86_64 libomp bottle), so there is nothing to lipo. Only the arm64 slice
+# links libomp, so ship the arm64-only dylib.
+cp build-arm64/bin/SolveSpace.app/Contents/Resources/libomp.dylib \
+   build/bin/SolveSpace.app/Contents/Resources/libomp.dylib
+
+lipo \
+    -create \
+        build/bin/SolveSpace.app/Contents/MacOS/SolveSpace \
+        build-arm64/bin/SolveSpace.app/Contents/MacOS/SolveSpace \
+    -output \
+        build/bin/SolveSpace.app/Contents/MacOS/SolveSpace
+
+lipo \
+    -create \
+        build/bin/SolveSpace.app/Contents/MacOS/solvespace-cli \
+        build-arm64/bin/SolveSpace.app/Contents/MacOS/solvespace-cli \
+    -output \
+        build/bin/SolveSpace.app/Contents/MacOS/solvespace-cli
+
+cd build
+
+openmp="bin/SolveSpace.app/Contents/Resources/libomp.dylib"
+app="bin/SolveSpace.app"
+dmg="bin/SolveSpace.dmg"
+bundle_id="com.solvespace.solvespace"
+
+if [ "$CI" = "true" ]; then
+    # get the signing certificate (this is the Developer ID:Application: Your Name, exported to a p12 file, then converted to base64, e.g.: cat ~/Desktop/certificate.p12 | base64 | pbcopy)
+    echo $MACOS_CERTIFICATE_P12 | base64 --decode > certificate.p12
+
+    # create a keychain
+    security create-keychain -p secret build.keychain
+    security default-keychain -s build.keychain
+    security unlock-keychain -p secret build.keychain
+
+    # import the key
+    security import certificate.p12 -k build.keychain -P "${MACOS_CERTIFICATE_PASSWORD}" -T /usr/bin/codesign
+
+    security set-key-partition-list -S apple-tool:,apple: -s -k secret build.keychain
+
+    # check if all is good
+    security find-identity -v
+fi
+
+# sign openmp
+codesign -s "${MACOS_DEVELOPER_ID}" --timestamp --options runtime -f --deep "${openmp}"
+
+# sign the .app
+codesign -s "${MACOS_DEVELOPER_ID}" --timestamp --options runtime -f --deep "${app}"
+
+# create the .dmg from the signed .app
+hdiutil create -srcfolder "${app}" "${dmg}"
+
+# sign the .dmg
+codesign -s "${MACOS_DEVELOPER_ID}" --timestamp --options runtime -f --deep "${dmg}"
+
+if ! command -v xcrun >/dev/null || ! xcrun --find notarytool >/dev/null; then
+    echo "Notarytool is not present in the system. Notarization has failed."
+    exit 1
+fi
+
+# Submit the package for notarization
+if notarization_output=$(
+    xcrun notarytool submit "${dmg}" \
+        --apple-id "hello@koenschmeets.nl" \
+        --password "${MACOS_APPSTORE_APP_PASSWORD}" \
+        --team-id "8X77K9NDG3" \
+        --wait 2>&1); then
+    echo "$notarization_output"
+    # Extract the submission ID (notarytool prints "id: <uuid>")
+    operation_id=$(echo "$notarization_output" | awk '/^ *id:/ {print $2; exit}')
+    echo "Notarization submitted. Operation ID: $operation_id"
+
+    # Fail if Apple did not accept the submission
+    echo "$notarization_output" | grep -q "status: Accepted" || {
+        echo "Notarization was not accepted"; exit 1; }
+
+    # staple
+    xcrun stapler staple "${dmg}"
+else
+    echo "Notarization failed. Error: $notarization_output"
+    exit 1
+fi

slvs-3.3/.github/workflows/cd.yml

@@ -0,0 +1,230 @@
+name: CD
+
+on:
+  push:
+    branches:
+      - master
+  release:
+    types:
+      - created
+
+jobs:
+  cancel_previous_runs:
+    runs-on: ubuntu-latest
+    name: Cancel Previous Runs
+    permissions:
+      actions: write
+    steps:
+    - uses: styfle/cancel-workflow-action@0.13.1
+      with:
+        access_token: ${{ github.token }}
+
+  test_ubuntu:
+    needs: [cancel_previous_runs]
+    runs-on: ubuntu-latest
+    name: Test Ubuntu
+    steps:
+    - uses: actions/checkout@v6
+    - name: Install Dependencies
+      run: .github/scripts/install-ubuntu.sh
+    - name: Build & Test
+      run: .github/scripts/build-ubuntu.sh
+
+  test_windows:
+    needs: [cancel_previous_runs]
+    runs-on: windows-2022
+    name: Test Windows
+    steps:
+    - uses: actions/checkout@v6
+    - name: Install Dependencies
+      run: .github/scripts/install-windows.sh
+      shell: bash
+    - name: Build & Test
+      run: .github/scripts/build-windows.sh
+      shell: bash
+
+  test_macos:
+    needs: [cancel_previous_runs]
+    runs-on: macos-latest
+    name: Test macOS
+    steps:
+    - uses: actions/checkout@v6
+    - name: Install Dependencies
+      run: .github/scripts/install-macos.sh ci
+    - name: Build & Test
+      run: .github/scripts/build-macos.sh debug arm64 && .github/scripts/build-macos.sh debug x86_64
+
+  build_release_windows_x86:
+    needs: [test_ubuntu, test_windows, test_macos]
+    name: Build Release Windows x86
+    runs-on: windows-2022
+    steps:
+      - uses: actions/checkout@v6
+      - name: Install Dependencies
+        run: .github/scripts/install-windows.sh
+        shell: bash
+      - name: Build & Test
+        run: .github/scripts/build-windows.sh release
+        shell: bash
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: windows_single_core_x86
+          path: build/bin/RelWithDebInfo/solvespace_single_core_x86.exe
+
+  build_release_windows_openmp_x86:
+    needs: [test_ubuntu, test_windows, test_macos]
+    name: Build Release Windows (OpenMP) x86
+    runs-on: windows-2022
+    steps:
+      - uses: actions/checkout@v6
+      - name: Install Dependencies
+        run: .github/scripts/install-windows.sh
+        shell: bash
+      - name: Build & Test
+        run: .github/scripts/build-windows.sh release openmp
+        shell: bash
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: windows_x86
+          path: build/bin/RelWithDebInfo/solvespace_x86.exe
+
+  build_release_windows_x64:
+    needs: [test_ubuntu, test_windows, test_macos]
+    name: Build Release Windows x64
+    runs-on: windows-2022
+    steps:
+      - uses: actions/checkout@v6
+      - name: Install Dependencies
+        run: .github/scripts/install-windows.sh
+        shell: bash
+      - name: Build & Test
+        run: .github/scripts/build-windows.sh release not_openmp x64
+        shell: bash
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: windows_single_core_x64
+          path: build/bin/RelWithDebInfo/solvespace_single_core_x64.exe
+
+  build_release_windows_openmp_x64:
+    needs: [test_ubuntu, test_windows, test_macos]
+    name: Build Release Windows (OpenMP) x64
+    runs-on: windows-2022
+    steps:
+      - uses: actions/checkout@v6
+      - name: Install Dependencies
+        run: .github/scripts/install-windows.sh
+        shell: bash
+      - name: Build & Test
+        run: .github/scripts/build-windows.sh release openmp x64
+        shell: bash
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: windows_x64
+          path: build/bin/RelWithDebInfo/solvespace_x64.exe
+
+  build_release_macos:
+    needs: [test_ubuntu, test_windows, test_macos]
+    name: Build Release macOS
+    runs-on: macos-latest
+    steps:
+    - uses: actions/checkout@v6
+    - name: Install Dependencies
+      run: .github/scripts/install-macos.sh ci
+    - name: Build & Test
+      run: .github/scripts/build-macos.sh release arm64 && .github/scripts/build-macos.sh release x86_64
+    - name: Sign Build
+      run: .github/scripts/sign-macos.sh
+      env:
+        MACOS_CERTIFICATE_PASSWORD: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }}
+        MACOS_CERTIFICATE_P12: ${{ secrets.MACOS_CERTIFICATE_P12 }}
+        MACOS_APPSTORE_APP_PASSWORD: ${{ secrets.MACOS_APPSTORE_APP_PASSWORD }}
+        MACOS_APPSTORE_USERNAME: ${{ secrets.MACOS_APPSTORE_USERNAME }}
+        MACOS_DEVELOPER_ID: ${{ secrets.MACOS_DEVELOPER_ID }}
+    - name: Upload artifact
+      uses: actions/upload-artifact@v6
+      with:
+        name: macos
+        path: build/bin/SolveSpace.dmg
+
+  build_release_web:
+    needs: [test_ubuntu, test_windows, test_macos]
+    name: Build Release Web
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v6
+    - name: Install Dependencies
+      run: .github/scripts/install-web.sh
+    - name: Build & Pack
+      run: |
+        .github/scripts/build-web.sh release
+        cd build/bin
+        rm *.a || true
+    - name: Upload artifact
+      uses: actions/upload-artifact@v6
+      with:
+        name: solvespace_web
+        path: build/bin/
+    - name: Ping solvespace.com
+      env:
+        WEB_SITE_PING_KEY: ${{ secrets.PULL_WEBVER_KEY }}
+      run: |
+        curl https://solvespace.com/pull-webver.pl?key=${WEB_SITE_PING_KEY}
+
+  # deploy_snap_amd64:
+  #   needs: [test_ubuntu, test_windows, test_macos]
+  #   name: Deploy AMD64 Snap
+  #   runs-on: ubuntu-latest
+  #   steps:
+  #   - uses: actions/checkout@v6
+  #   - name: Fetch Tags
+  #     run: git fetch --force --tags
+  #   - name: Set Up Source
+  #     run: rsync --filter=":- .gitignore" -r ./ pkg/snap/solvespace-snap-src
+  #   - name: Build Snap
+  #     uses: snapcore/action-build@v1
+  #     id: build
+  #     with:
+  #       path: pkg/snap
+  #   - name: Upload & Release to Edge
+  #     if: github.event_name == 'push'
+  #     uses: snapcore/action-publish@v1
+  #     env:
+  #       SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPSTORE_LOGIN }}
+  #     with:
+  #       snap: ${{ steps.build.outputs.snap }}
+  #       release: edge
+  #   - name: Upload & Release to Beta + Edge
+  #     if: github.event_name == 'release'
+  #     uses: snapcore/action-publish@v1
+  #     with:
+  #       store_login: ${{ secrets.SNAPSTORE_LOGIN }}
+  #       snap: ${{ steps.build.outputs.snap }}
+  #       release: edge,beta
+
+  upload_release_assets:
+    name: Upload Release Assets
+    needs:
+      - build_release_windows_x86
+      - build_release_windows_openmp_x86
+      - build_release_windows_x64
+      - build_release_windows_openmp_x64
+      - build_release_macos
+    if: "!cancelled() && github.event_name == 'release'"
+    runs-on: ubuntu-latest
+    steps:
+    - name: Download All Workflow Artifacts
+      uses: actions/download-artifact@v8
+
+    - name: Create release
+      uses: softprops/action-gh-release@v2
+      with:
+        files: |
+          windows_single_core_x86/solvespace_single_core_x86.exe
+          windows_x86/solvespace_x86.exe
+          windows_single_core_x64/solvespace_single_core_x64.exe
+          windows_x64/solvespace_x64.exe
+          macos/SolveSpace.dmg

slvs-3.3/.github/workflows/python.yml

@@ -0,0 +1,176 @@
+name: Python
+
+on:
+  push:
+    branches: [ master ]
+    tags: [ v* ]
+  workflow_dispatch:
+
+jobs:
+  python-sdist:
+    name: python sdist
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - run: git submodule update --init extlib/mimalloc extlib/eigen
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.10"
+      - name: Pack
+        shell: bash
+        run: |
+          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
+            version="${GITHUB_REF##*/}"
+          else
+            mkdir empty-build
+            cd empty-build
+            cmake .. -DENABLE_GUI=OFF -DENABLE_CLI=OFF -DENABLE_TESTS=OFF -DENABLE_COVERAGE=OFF -DENABLE_SANITIZERS=OFF -DENABLE_OPENMP=OFF
+            source version.env
+            cd ..
+            version="${VERSION_MAJOR}.${VERSION_MINOR}.${VERSION_PATCH}.dev${GITHUB_RUN_NUMBER}"
+          fi
+          sed -i.bak "s/^version = .*/version = \"${version}\"/g" pyproject.toml && rm pyproject.toml.bak
+          python -m pip install -U setuptools build
+          python -m build --sdist
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: sdist
+          path: dist/*.tar.gz
+  python-wheel:
+    name: ${{ matrix.os_short }} python ${{ matrix.architecture }} cp${{ matrix.python_version }}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 240
+    strategy:
+      fail-fast: false
+      matrix:
+        os_arch: [
+          "windows-ia32",
+          "windows-x64",
+          # "windows-arm64",
+          "macos-x86_64",
+          "macos-arm64",
+          "linux-x86_64",
+          "linux-aarch64",
+        ]
+        python_version: [
+          "38",
+          "39",
+          "310",
+          "311",
+          "312",
+          "313",
+          "314"
+        ]
+        include:
+          - os_arch: "windows-ia32"
+            os: "windows-2022"
+            os_short: "windows"
+            architecture: "ia32"
+            cibuildwheel_architecture: "x86"
+            cmake_generator_platform: "Win32"
+          - os_arch: "windows-x64"
+            os: "windows-2022"
+            os_short: "windows"
+            architecture: "x64"
+            cibuildwheel_architecture: "AMD64"
+            cmake_generator_platform: "x64"
+          # - os_arch: "windows-arm64"
+          #   os: "windows-2022"
+          #   os_short: "windows"
+          #   architecture: "arm64"
+          #   cibuildwheel_architecture: "ARM64"
+          #   cmake_generator_platform: "ARM64"
+          - os_arch: "macos-x86_64"
+            os: "macos-latest"
+            os_short: "macos"
+            cibuildwheel_architecture: "x86_64"
+            architecture: "x86_64"
+          - os_arch: "macos-arm64"
+            os: "macos-latest"
+            os_short: "macos"
+            cibuildwheel_architecture: "arm64"
+            architecture: "arm64"
+          - os_arch: linux-x86_64
+            os: "ubuntu-22.04"
+            os_short: "linux"
+            cibuildwheel_architecture: "x86_64"
+            architecture: "x86_64"
+          - os_arch: linux-aarch64
+            os: "ubuntu-22.04"
+            os_short: "linux"
+            cibuildwheel_architecture: "aarch64"
+            architecture: "aarch64"
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - run: git submodule update --init extlib/mimalloc extlib/eigen
+      - name: Set version
+        shell: bash
+        run: |
+          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
+            version="${GITHUB_REF##*/}"
+          else
+            mkdir empty-build
+            cd empty-build
+            cmake .. -DENABLE_GUI=OFF -DENABLE_CLI=OFF -DENABLE_TESTS=OFF -DENABLE_COVERAGE=OFF -DENABLE_SANITIZERS=OFF -DENABLE_OPENMP=OFF
+            source version.env
+            cd ..
+            version="${VERSION_MAJOR}.${VERSION_MINOR}.${VERSION_PATCH}.dev${GITHUB_RUN_NUMBER}"
+          fi
+          sed -i.bak "s/^version = .*/version = \"${version}\"/g" pyproject.toml && rm pyproject.toml.bak
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+        if: matrix.architecture == 'aarch64'
+        with:
+          platforms: arm64
+      - name: Build wheels
+        uses: pypa/cibuildwheel@v3.4.0
+        env:
+          CIBW_BUILD: "cp${{ matrix.python_version }}-*"
+          CIBW_PLATFORM: "${{ matrix.os_short }}"
+          CIBW_BUILD_VERBOSITY: "1"
+          CIBW_ARCHS: "${{ matrix.cibuildwheel_architecture }}"
+          CIBW_ENVIRONMENT_WINDOWS: >
+            CMAKE_GENERATOR="Visual Studio 17 2022"
+            CMAKE_GENERATOR_PLATFORM="${{ matrix.cmake_generator_platform }}"
+          CIBW_ENVIRONMENT_PASS_WINDOWS: "CMAKE_GENERATOR CMAKE_GENERATOR_PLATFORM"
+          CIBW_ENVIRONMENT_MACOS: MACOSX_DEPLOYMENT_TARGET=10.12
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheel-cp${{ matrix.python_version }}-${{ matrix.os_short }}-${{ matrix.architecture }}
+          path: |
+            ./wheelhouse/*.whl
+  publish-pypi:
+    name: publish to PyPi
+    needs: [
+      python-sdist,
+      python-wheel,
+    ]
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          path: prebuilds
+      - name: prepare
+        shell: bash
+        run: |
+          mkdir dist
+          ls prebuilds
+          mv prebuilds/*/* dist
+          ls dist
+      - name: Publish wheels to Test PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
+          repository-url: https://test.pypi.org/legacy/
+          attestations: false
+          verbose: true
+      - name: Publish wheels to PyPI
+        if: startsWith(github.ref, 'refs/tags')
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}
+          attestations: false
+          verbose: true