publish.yml

name: Publish to PyPI.org
on:
  release:
    types: [ published ]
  workflow_dispatch:

permissions:
  id-token: write

jobs:
  pypi:
    runs-on: ubuntu-latest
    environment: Deploy
    env:
      GITHUB_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Set up Python
        uses: actions/setup-python@v4
      - name: Install dependencies
        run: |
          python3 -m pip install --upgrade pip
          python3 -m pip install --upgrade setuptools wheel
          python3 -m pip install --upgrade build
          python3 -m pip install --upgrade twine
      # setup.py expects the environment variable VERSION to be set
      - name: Build and publish
        run: |
          export VERSION=$(gh release view --jq '.tagName' --json tagName)
          echo "VERSION: $VERSION"
          python3 -m build
          python3 -m twine check dist/*
          python3 -m twine upload --repository pypi dist/* --username __token__ --password ${{ secrets.PYPI_API_TOKEN }}