Use separate upload step

Author: Cadair

.github/workflows/ci.yml

@@ -114,9 +114,7 @@ jobs:
           pytest -vvv -r a --pyargs ablog
           make tests
 
-  publish:
-    # Build wheels on PRs only when labelled. Releases will only be published if tagged ^v.*
-    # see https://github-actions-workflows.openastronomy.org/en/latest/publish.html#upload-to-pypi
+  build:
     if: |
       github.event_name != 'pull_request' ||
       (
@@ -128,5 +126,21 @@ jobs:
     with:
       python-version: "3.13"
       submodules: false
-    secrets:
-      pypi_token: ${{ secrets.PYPI_TOKEN }}
+      upload_to_pypi: false
+      save_artifacts: true
+
+  upload:
+    if: startsWith(github.ref, 'refs/tags/v')
+    name: Upload to PyPI
+    runs-on: ubuntu-latest
+    needs: [build]
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v5
+        with:
+          merge-multiple: true
+          pattern: dist-*
+          path: dist
+
+      - name: Run upload
+        uses: pypa/gh-action-pypi-publish@release/v1