build(deps): bump astral-sh/setup-uv in the github-actions group (#159) #243

	name: deploy

	on:
	workflow_dispatch:
	pull_request:
	push:
	branches:
	- main
	tags:
	- v*

	permissions: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: false

	jobs:
	dist:
	name: Build distributions
	runs-on: ubuntu-latest
	permissions: {}
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false
	- uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5 # v3.0.1

	deploy:
	name: Publish to PyPI
	needs: [dist]
	runs-on: ubuntu-latest
	if: startsWith(github.ref, 'refs/tags/v')
	permissions:
	id-token: write # required to sign the attestation
	attestations: write # required to store the attestation

	steps:
	- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
	with:
	name: Packages
	path: dist

	- name: Generate artifact attestation for sdist and wheel
	uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
	with:
	subject-path: "dist/*"

	- name: Publish package
	uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
	with:
	password: ${{ secrets.pypi_password }}

Navigation Menu