ci: publish to PyPI on every successful CI run

Author: ThomasRohde

.github/workflows/publish.yml

@@ -1,6 +1,12 @@
 name: Publish to PyPI
 
 on:
+  # Trigger after CI workflow completes successfully on master/main
+  workflow_run:
+    workflows: ["CI"]
+    types: [completed]
+    branches: [master, main]
+  # Also support manual tag-based releases
   release:
     types: [published]
   push:
@@ -10,8 +16,15 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    # Only run if CI succeeded (for workflow_run trigger) or for tags/releases
+    if: |
+      github.event_name == 'release' ||
+      github.event_name == 'push' ||
+      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.workflow_run.head_sha || github.sha }}
 
       - name: Install uv
         uses: astral-sh/setup-uv@v4
@@ -56,7 +69,11 @@ jobs:
   publish-pypi:
     runs-on: ubuntu-latest
     needs: [build]
-    if: github.event_name == 'release'
+    # Publish on: releases, tag pushes, or successful CI on master/main
+    if: |
+      github.event_name == 'release' ||
+      (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')) ||
+      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
     environment:
       name: pypi
       url: https://pypi.org/p/klondike-spec-cli
@@ -70,3 +87,5 @@ jobs:
 
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true