ci: publish Metadata 2.5 distributions with uv

Author: emeisazam

.github/workflows/python-release.yml

@@ -4,6 +4,11 @@ on:
   push:
     tags:
       - "v*"
+  workflow_dispatch:
+    inputs:
+      release_ref:
+        description: Existing release tag to rebuild and publish
+        required: true
 
 permissions:
   contents: read
@@ -16,6 +21,8 @@ jobs:
       - name: Checkout Oída
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.release_ref || github.ref_name }}
+          fetch-depth: 0
           path: oida
 
       - name: Checkout AKOÚŌ contract
@@ -46,8 +53,15 @@ jobs:
 
       - name: Verify release tag and project version
         working-directory: oida
+        env:
+          RELEASE_REF: ${{ github.event_name == 'workflow_dispatch' && inputs.release_ref || github.ref_name }}
         run: |
-          release_version="${GITHUB_REF_NAME#v}"
+          case "$RELEASE_REF" in
+            v*) ;;
+            *) echo "release_ref must name a v-prefixed release tag" >&2; exit 1 ;;
+          esac
+          test "$(git describe --tags --exact-match HEAD)" = "$RELEASE_REF"
+          release_version="${RELEASE_REF#v}"
           project_version="$(uv version --short)"
           test "$release_version" = "$project_version"
 
@@ -109,11 +123,15 @@ jobs:
           name: python-distributions
           path: release
 
+      - name: Install uv
+        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+
       - name: Publish ${{ matrix.project }}
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
-        with:
-          packages-dir: release/${{ matrix.directory }}
-          skip-existing: true
+        run: >-
+          uv publish
+          --trusted-publishing always
+          --check-url https://pypi.org/simple
+          "release/${{ matrix.directory }}/*"
 
   publish-oida:
     name: Publish sonicfield-oida to PyPI
@@ -133,8 +151,12 @@ jobs:
           name: python-distributions
           path: release
 
+      - name: Install uv
+        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+
       - name: Publish sonicfield-oida
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
-        with:
-          packages-dir: release/oida
-          skip-existing: true
+        run: >-
+          uv publish
+          --trusted-publishing always
+          --check-url https://pypi.org/simple
+          "release/oida/*"