Trigger publish-to-pypi job when `check-version.outputs.new_version…

…` is not empty

PiperOrigin-RevId: 721902917

.github/workflows/pytest_and_autopublish.yml

@@ -116,14 +116,51 @@ jobs:
         fi
         echo "new_version=$NEW_VERSION" >> $GITHUB_OUTPUT
 
+  create-tag:
+    name: Create Version Tag
+    runs-on: ubuntu-latest
+    needs: check-version
+    if: ${{ needs.check-version.outputs.new_version != '' }} # Only run if new_version was discovered.
+    steps:
+      - uses: actions/checkout@v4
+      - name: Create and Push Tag
+        uses: actions/github-script@v6
+        with:
+          script: |
+            const newTag = 'v${{ needs.check-version.outputs.new_version }}';
+            try {
+              await github.rest.git.createTag({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                tag: newTag,
+                message: `Release ${newTag}`,
+                object: context.sha,
+                type: 'commit'
+              });
+              await github.rest.git.createRef({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                ref: `refs/tags/${newTag}`,
+                sha: context.sha
+              });
+              console.log(`Created and pushed new tag: ${newTag}`);
+            } catch (error) {
+              console.error('Error creating tag:', error);
+              core.setFailed(`Failed to create tag: ${error.message}`);
+            }
+
   publish-to-pypi:
-    name: >-
-      Publish Python distribution to PyPI
+    name: Publish Python distribution to PyPI
+    needs: check-version
     # Check if it's a tag push or the `publish_to_pypi` workflow is selected in a manual trigger.
     if: >
-      (github.ref_type == 'tag' && startsWith(github.ref, 'refs/tags/'))
-      || (github.event_name == 'workflow_dispatch'
-          && github.event.inputs.publish_to_pypi == 'true')
+      github.ref == 'refs/heads/main'
+      && (
+        (github.ref_type == 'tag' && startsWith(github.ref, 'refs/tags/'))
+        || (github.event_name == 'workflow_dispatch'
+            && github.event.inputs.publish_to_pypi == 'true')
+        || needs.check-version.outputs.new_version != ''
+      )
     needs:
     - build
     - pytest-job