From ca29d527c9e5f9391dfcad6601ad9c585b511b47 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Elisi=C3=A1rio=20Couto?= Date: Tue, 14 Jan 2025 01:07:35 +0000 Subject: [PATCH] chore: Setup PyPI Trusted Publishing. --- .github/workflows/release.yml | 24 +++++++++++++++++++----- 1 file changed, 19 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 259621b..575c660 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -6,23 +6,37 @@ on: - "**" jobs: - publish-pypi: + build: runs-on: ubuntu-latest - steps: - uses: actions/checkout@v4 - - name: Install uv uses: astral-sh/setup-uv@v5 - - name: "Set up Python" uses: actions/setup-python@v5 with: python-version-file: "pyproject.toml" - - name: Build Package run: uv build + - name: Store the distribution packages + uses: actions/upload-artifact@v4 + with: + name: python-package-distributions + path: dist/ + publish-to-pypi: + name: Publish Python distribution to PyPI + runs-on: ubuntu-latest + permissions: + id-token: write # IMPORTANT: mandatory for trusted publishing + needs: + - build + steps: + - name: Download all the dists + uses: actions/download-artifact@v4 + with: + name: python-package-distributions + path: dist/ - name: Publish package run: uv publish