Updated actions workflow

Author: dhondta

.github/workflows/python-package.yml

@@ -10,29 +10,30 @@ on:
     branches: [ "main" ]
 
 permissions:
-  actions: write
-  id-token: write # for OIDC
+  id-token: write
   contents: read
 
 jobs:
   prepare:
     runs-on: ubuntu-latest
     outputs:
       package: ${{ steps.pkg.outputs.package }}
+      pypi_url: ${{ steps.pkg.outputs.pypi_url }}
     steps:
       - name: Compute package name from the repository's
         id: pkg
         run: |
           name="${GITHUB_REPOSITORY##*/}"
           echo "package=${name#python-}" >> $GITHUB_OUTPUT
+          echo "pypi_url=https://pypi.org/p/${name#python-}" >> $GITHUB_OUTPUT
   build:
     needs: prepare
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
         os: [ubuntu-latest]
-        python-version: ["3.10", "3.11", "3.12", "3.13"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
     env:
       package: ${{ needs.prepare.outputs.package }}
     steps:
@@ -43,6 +44,7 @@ jobs:
         python-version: ${{ matrix.python-version }}
     - name: Install ${{ env.package }}
       run: |
+        sudo apt install graphviz libgraphviz-dev
         python -m pip install --upgrade pip
         python -m pip install pytest pytest-cov coverage
         pip install -r requirements.txt
@@ -52,19 +54,25 @@ jobs:
         pytest --cov=$package
   coverage:
     needs: [prepare, build]
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     env:
       cov_badge_path: docs/coverage.svg
       package: ${{ needs.prepare.outputs.package }}
       python_version: "3.13"
     steps:
     - uses: actions/checkout@v5
+      with:
+        fetch-depth: 0
+        ref: ${{ github.head_ref || github.ref_name }}
     - name: Set up Python ${{ env.python_version }}
       uses: actions/setup-python@v6
       with:
         python-version: ${{ env.python_version }}
     - name: Install ${{ env.package }}
       run: |
+        sudo apt install graphviz libgraphviz-dev
         python -m pip install --upgrade pip
         python -m pip install pytest pytest-cov
         pip install -r requirements.txt
@@ -79,20 +87,21 @@ jobs:
       id: changed_files
       with:
         files: ${{ env.cov_badge_path }}
-    - name: Commit files
+    - name: Push coverage badge
       if: steps.changed_files.outputs.files_changed == 'true'
       run: |
         git config --local user.email "github-actions[bot]@users.noreply.github.com"
         git config --local user.name "github-actions[bot]"
+        git fetch origin
+        git checkout coverage-badge || git checkout -b coverage-badge
         git add $cov_badge_path
-        git commit -m "Updated coverage.svg"
-    - name: Push changes
-      if: steps.changed_files.outputs.files_changed == 'true'
-      uses: ad-m/github-push-action@master
-      with:
-        github_token: ${{ secrets.github_token }}
-        branch: ${{ github.ref }}
+        git diff --cached --quiet && exit 0
+        git commit -m "Update coverage badge"
+        git push origin coverage-badge --force
   deploy:
+    environment:
+      name: pypi
+      url: ${{ needs.prepare.outputs.pypi_url }}
     runs-on: ubuntu-latest
     needs: [prepare, coverage]
     steps: