pypi.yaml

on:
  workflow_dispatch:
  release:
    types:
      - published

env:
  DEFAULT_PYTHON: "3.12"
    
jobs:
  pypi-publish:
    name: Upload release to PyPI
    runs-on: ubuntu-latest
    environment: pypi
    permissions:
      id-token: write 
      contents: write
    steps:

    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: Set up Python ${{ env.DEFAULT_PYTHON }}
      id: python
      uses: actions/setup-python@v5
      with:
        python-version: ${{ env.DEFAULT_PYTHON }}
    
    - name: Set up uv
      run: pipx install uv

    - name: Install dependencies
      run: |
        uv pip install --system -r pyproject.toml --extra dev

    - name: Build package
      run: uv build
    
    - name: Publish package distributions to PyPI
      uses: pypa/gh-action-pypi-publish@release/v1

    - name: ✍️ Sign published artifacts
      uses: sigstore/gh-action-sigstore-python@v3.0.0
      with:
        inputs: ./dist/*.tar.gz ./dist/*.whl
        release-signing-artifacts: true