Update publish step in workflow

Author: kbonney

.github/workflows/build_tests.yml

@@ -209,28 +209,28 @@ jobs:
           path: dist/*.tar.gz
 
   publish-to-pypi:
-    name: Publish Python 🐍 distribution 📦 to TestPyPI
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
-    needs: [build_wheels, build_sdist]
+    name: Publish Python 🐍 distribution 📦 to PyPI
+    needs: [build_sdist, test_wheels]
     runs-on: ubuntu-latest
     environment:
-      name: testpypi
-      url: https://test.pypi.org/p/kbonney-wntr
+      name: release
     permissions:
       id-token: write
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
     steps:
-    - name: Download wheel artifacts from build
-      uses: actions/download-artifact@v4
-      with:
-        pattern: wntr_*
-        path: dist
-        merge-multiple: true
-    - name: Download SDist artifact
-      uses: actions/download-artifact@v4
-      with:
-        name: sdist
-        path: dist
-    - name: Publish distribution 📦 to TestPyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        repository-url: https://test.pypi.org/legacy/
+      - name: Download wheel artifacts
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          pattern: cibw-*
+          path: dist
+          merge-multiple: true
+      - name: Download SDist artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: sdist
+          path: dist
+
+      - uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # release/v1
+        with:
+          user: __token__
+          password: ${{ secrets.PYPI_WNTR_API_TOKEN }}