Refactor: Implementing custom query engine (instead of sea-query)

.github/workflows/publish.yml

@@ -4,225 +4,269 @@ on:
   push:
     tags:
       - "*"
+
   workflow_dispatch:
 
+permissions:
+  contents: read
+
+env:
+  (^_^): &interpreters "3.10 3.11 3.12 3.13 3.14 3.14t 3.15 3.15t pypy3.11"
+  ○_○: &interpreters_without_pypy "3.10 3.11 3.12 3.13 3.14 3.14t 3.15 3.15t"
+  (o_o): &interpreters_win_arm64 "3.11 3.12 3.13 3.14 3.14t 3.15 3.15t"
+
+  UV_FROZEN: true
+
 jobs:
-  linux:
-    runs-on: ${{ matrix.platform.runner }}
+  build-linux:
+    runs-on: ubuntu-latest
     strategy:
       matrix:
         platform:
           - {
-              runner: ubuntu-latest,
-              target: x86_64,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t pypy3.11 graalpy3.11 graalpy3.12",
+              target: x86_64-unknown-linux-gnu,
+              arch: x86_64,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
-              target: i686,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t pypy3.11",
+              target: i686-unknown-linux-gnu,
+              arch: x86,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
-              target: aarch64,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t pypy3.11 graalpy3.11 graalpy3.12",
+              target: aarch64-unknown-linux-gnu,
+              arch: aarch64,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
-              target: armv7,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t",
+              target: armv7-unknown-linux-gnueabihf,
+              arch: armv7,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
-              target: s390x,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t",
+              target: s390x-unknown-linux-gnu,
+              arch: s390x,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
-              target: ppc64le,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t",
+              target: powerpc64le-unknown-linux-gnu,
+              arch: ppc64le,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
               target: riscv64gc-unknown-linux-gnu,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t",
+              arch: riscv64,
+              interpreter: *interpreters,
             }
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@v6
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
-          python-version: "3.x"
+          activate-environment: true
+          enable-cache: false
+          python-version: "3"
 
-      - uses: PyO3/maturin-action@v1.51.0
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
         with:
           target: ${{ matrix.platform.target }}
-          args: --release --out dist --interpreter ${{ matrix.platform.interpreter }}
-          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+          sccache: ${{ github.ref_type != 'tag' }}
           manylinux: auto
-          rust-toolchain: nightly
+          args: >-
+            --release
+            --out dist
+            --interpreter ${{ matrix.platform.interpreter }}
+            --compatibility pypi
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
-          name: wheels-linux-${{ matrix.platform.target }}
+          name: wheels-linux-${{ matrix.platform.arch }}
           path: dist
 
-  musllinux:
-    runs-on: ${{ matrix.platform.runner }}
+  build-musllinux:
+    runs-on: ubuntu-latest
     strategy:
       matrix:
         platform:
           - {
-              runner: ubuntu-latest,
-              target: x86_64,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t pypy3.11",
+              target: x86_64-unknown-linux-musl,
+              arch: x86_64,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
-              target: aarch64,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t pypy3.11",
+              target: i686-unknown-linux-musl,
+              arch: x86,
+              interpreter: *interpreters,
             }
           - {
-              runner: ubuntu-latest,
-              target: armv7,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t pypy3.11",
+              target: aarch64-unknown-linux-musl,
+              arch: aarch64,
+              interpreter: *interpreters,
+            }
+          - {
+              target: armv7-unknown-linux-musleabihf,
+              arch: armv7,
+              interpreter: *interpreters,
+            }
+          - {
+              target: riscv64gc-unknown-linux-musl,
+              arch: riscv64,
+              interpreter: *interpreters,
             }
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@v6
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
-          python-version: "3.x"
+          activate-environment: true
+          enable-cache: false
+          python-version: "3"
 
-      - uses: PyO3/maturin-action@v1.51.0
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
         with:
           target: ${{ matrix.platform.target }}
-          args: --release --out dist --interpreter ${{ matrix.platform.interpreter }}
-          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
-          manylinux: musllinux_1_1
-          rust-toolchain: nightly
+          sccache: ${{ github.ref_type != 'tag' }}
+          manylinux: musllinux_1_2
+          args: >-
+            --release
+            --out dist
+            --interpreter ${{ matrix.platform.interpreter }}
+            --compatibility pypi
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
-          name: wheels-musllinux-${{ matrix.platform.target }}
+          name: wheels-musllinux-${{ matrix.platform.arch }}
           path: dist
 
-  windows:
+  build-windows:
     runs-on: ${{ matrix.platform.runner }}
     strategy:
       matrix:
         platform:
           - {
               runner: windows-latest,
               target: x64,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t",
+              arch: x64,
+              interpreter: *interpreters,
             }
           - {
               runner: windows-latest,
               target: x86,
-              interpreter: "3.10 3.11 3.12 3.13 3.14 3.14t",
+              arch: x86,
+              interpreter: *interpreters_without_pypy,
+            }
+          - {
+              runner: windows-11-arm,
+              target: aarch64,
+              arch: arm64,
+              interpreter: *interpreters_win_arm64,
             }
+
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@v6.0.0
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: 3.x
-          architecture: ${{ matrix.platform.target }}
-      - uses: PyO3/maturin-action@v1.49.4
+          python-version: "3.x"
+          architecture: ${{ matrix.platform.arch }}
+
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
         with:
           target: ${{ matrix.platform.target }}
-          args: --release --out dist --interpreter ${{ matrix.platform.interpreter }}
-          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
-          rust-toolchain: nightly
+          sccache: ${{ github.ref_type != 'tag' }}
+          args: >-
+            --release
+            --out dist
+            --interpreter ${{ matrix.platform.interpreter }}
+            --compatibility pypi
 
-      - uses: actions/upload-artifact@v4.6.2
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: wheels-windows-${{ matrix.platform.target }}
           path: dist
 
-  macos:
-    runs-on: ${{ matrix.platform.runner }}
+  build-macos:
+    runs-on: macos-latest
     strategy:
       matrix:
         platform:
-          - {
-              runner: macos-latest,
-              target: x86_64,
-              interpreter: "3.10 3.11 3.12 3.13 3.13t 3.14 3.14t pypy3.11",
-            }
-          - {
-              runner: macos-latest,
-              target: aarch64,
-              interpreter: "3.10 3.11 3.12 3.13 3.13t 3.14 3.14t pypy3.11",
-            }
+          - { target: x86_64, interpreter: *interpreters }
+          - { target: aarch64, interpreter: *interpreters }
+
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@v6.0.0
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: 3.x
+          python-version: "3.x"
 
-      - uses: PyO3/maturin-action@v1.49.4
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
         with:
           target: ${{ matrix.platform.target }}
-          args: --release --out dist --interpreter ${{ matrix.platform.interpreter }}
-          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
-          rust-toolchain: nightly
+          sccache: ${{ github.ref_type != 'tag' }}
+          args: >-
+            --release
+            --out dist
+            --interpreter ${{ matrix.platform.interpreter }}
+            --compatibility pypi
 
-      - uses: actions/upload-artifact@v4.6.2
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: wheels-macos-${{ matrix.platform.target }}
           path: dist
+
   build-sdist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
-      - uses: PyO3/maturin-action@v1.51.0
+      - name: Build sdist
+        uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
         with:
           command: sdist
           args: --out dist
-          rust-toolchain: nightly
 
-      - uses: actions/upload-artifact@v4
+      - name: Upload sdist
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: wheels-sdist
           path: dist
 
   release:
     runs-on: ubuntu-latest
-    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
-    needs: [linux, musllinux, windows, macos, build-sdist]
+    if: github.ref_type == 'tag' || github.event_name == 'workflow_dispatch'
+    needs:
+      - build-linux
+      - build-musllinux
+      - build-windows
+      - build-macos
+      - build-sdist
+
     permissions:
-      id-token: write # signing release artifacts
-      contents: write # uploading release artifacts
-      attestations: write
+      id-token: write
+      contents: write
 
     steps:
-      - uses: actions/download-artifact@v5
-
-      - uses: actions/attest-build-provenance@v3
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
-          subject-path: "wheels-*/*"
+          pattern: wheels-*
+          merge-multiple: true
+          path: dist
 
       - name: Publish to PyPI
-        if: ${{ startsWith(github.ref, 'refs/tags/') }}
-        uses: PyO3/maturin-action@v1.51.0
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-        with:
-          command: upload
-          args: --non-interactive --skip-existing wheels-*/*
-          rust-toolchain: nightly
+        if: github.ref_type == 'tag'
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+        with:
+          packages-dir: dist