python-publish.yml

# This workflow will upload a Python Package using Twine when a release is created
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-python#publishing-to-package-registries

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

name: Upload Python Package

on:
  push:
    tags:
      # Publish on any tag starting with a `v`, e.g. v1.2.3
      - v*

jobs:
  pypi-publish:
    name: Upload release to PyPI
    runs-on: ubuntu-latest
    environment:
      name: pypi
    permissions:
      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing

    steps:
    - uses: actions/checkout@v6
    - uses: astral-sh/setup-uv@v7
    - name: Build package
      run: |
        uv build
    - name: Run test (wheel)
      run: |
        uv run --isolated --no-project -p 3.13 --with dist/*.whl tests/pypi_test.py
    - name: Run test (source distribtution)
      run: |
        uv run --isolated --no-project -p 3.13 --with dist/*.tar.gz tests/pypi_test.py
    - run: uv publish --trusted-publishing always