release.yaml

name: Build and publish to PyPI

on:
  push:
    tags:
      - "*"

jobs:
  build:
    name: Test and build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout 🔁
        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6

      - name: Set up Python 🐍
        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
        with:
          python-version: "3.11"

      - name: Install Poetry and pre-commit 💈
        run: pip install poetry pre-commit

      - name: Install dependencies 🛠
        run: poetry install

      - name: Run pre-commit 🤔
        run: pre-commit run --all-files

      - name: Run tests 🌈
        run: poetry run invoke test

      - name: Build the package 📦
        run: poetry build

      - name: Publish build artifact ⬆️
        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 #v4.3.3
        with:
          name: package-dist
          path: dist
  publish:
    name: Publish
    needs: build
    runs-on: ubuntu-latest
    environment: PyPI
    permissions:
      # this permission is mandatory for trusted publishing
      id-token: write
    steps:
      - name: Download build artifact ⬇️
        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e #v4.1.7
        with:
          name: package-dist
          path: dist

      - name: Publish package to PyPI 🙌
        uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 #v1.8.14