fix: combine release and publish

Author: future-xy

.github/workflows/pypi-publish.yml

@@ -1,11 +1,11 @@
-# Automatically create a GitHub Release when a version tag is pushed
-# This triggers the pypi-publish.yml workflow
+# Auto-create GitHub Release and publish to PyPI when a version tag is pushed
+# Uses Trusted Publishing (OIDC) - no API tokens needed
 #
 # Usage:
 #   git tag v0.1.0
 #   git push origin v0.1.0
 
-name: Auto Release
+name: Release
 
 on:
   push:
@@ -14,15 +14,40 @@ on:
 
 permissions:
   contents: write
+  id-token: write  # Required for trusted publishing
 
 jobs:
-  create-release:
+  build:
+    name: Build distributions
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build dependencies
+        run: python -m pip install --upgrade pip build
+
+      - name: Build distributions
+        run: python -m build
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-dists
+          path: dist/
+
+  release:
     name: Create GitHub Release
     runs-on: ubuntu-latest
+    needs: build
     steps:
       - uses: actions/checkout@v4
         with:
-          fetch-depth: 0  # Fetch all history for changelog
+          fetch-depth: 0
 
       - name: Get version from tag
         id: version
@@ -42,11 +67,16 @@ jobs:
           else
             CHANGELOG=$(git log --pretty=format:"- %s (%h)" --no-merges -20)
           fi
-          # Escape for GitHub output
           echo "changelog<<EOF" >> $GITHUB_OUTPUT
           echo "$CHANGELOG" >> $GITHUB_OUTPUT
           echo "EOF" >> $GITHUB_OUTPUT
 
+      - name: Download distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: release-dists
+          path: dist/
+
       - name: Create Release
         uses: softprops/action-gh-release@v2
         with:
@@ -68,4 +98,23 @@ jobs:
             Full Changelog: https://github.com/${{ github.repository }}/compare/${{ steps.prev_tag.outputs.prev_tag }}...v${{ steps.version.outputs.version }}
           draft: false
           prerelease: ${{ contains(steps.version.outputs.version, '-') }}
-          generate_release_notes: false
+          files: |
+            dist/*
+
+  publish:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs: build
+    environment:
+      name: pypi
+      url: https://pypi.org/p/pylet
+
+    steps:
+      - name: Download distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: release-dists
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1