Publish to PyPI #29

	name: Publish to PyPI

	on:
	release:
	types: [published]
	workflow_dispatch: # Allow manual trigger

	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.11'
	cache: 'pip'

	- name: Install build dependencies
	run: pip install build

	- name: Build package
	run: python -m build

	- name: Upload artifacts
	uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
	with:
	name: dist
	path: dist/

	publish:
	needs: build
	runs-on: ubuntu-latest
	timeout-minutes: 10
	environment: pypi
	permissions:
	id-token: write # Required for trusted publishing
	steps:
	- name: Download artifacts
	uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
	with:
	name: dist
	path: dist/

	- name: Publish to PyPI
	uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
	# No token needed - uses OIDC trusted publishing

Provide feedback