Merge pull request #2005 from roboflow/develop #3

	name: Publish Supervision Releases to PyPI

	on:
	push:
	tags:
	- "[0-9]+.[0-9]+[0-9]+.[0-9]"
	workflow_dispatch:

	permissions: {} # Explicitly remove all permissions by default

	jobs:
	publish-release:
	name: Publish Release Package
	runs-on: ubuntu-latest
	environment:
	name: release
	url: https://pypi.org/project/supervision/
	timeout-minutes: 10
	permissions:
	id-token: write # Required for PyPI publishing
	contents: read # Required for checkout
	strategy:
	matrix:
	python-version: ["3.10"]
	steps:
	- name: 📥 Checkout the repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: 🐍 Install uv and set Python version ${{ matrix.python-version }}
	uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2
	with:
	python-version: ${{ matrix.python-version }}
	activate-environment: true


	- name: 🏗️ Build source and wheel distributions
	run: \|
	uv pip install -r pyproject.toml --group build
	uv build
	uv run twine check --strict dist/*

	- name: 🚀 Publish to PyPi
	uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
	with:
	attestations: true

Provide feedback