publish.yml

name: Publish

on:
  release:
    types:
      - published
  workflow_call:
  workflow_dispatch:

env:
  PYTHONUNBUFFERED: "1"
  FORCE_COLOR: "1"

jobs:
  publish-to-pypi:
    name: Publish Python distribution to PyPI
    if: startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Download all distributions from release
        env:
          GITHUB_TOKEN: ${{ github.token }}
        run: >-
          gh release download
          '${{ github.ref_name }}'
          -p '*.whl'
          -p '*.tar.gz'
          --dir dist/
          --repo '${{ github.repository }}'

      - name: Publish package distributions to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          password: ${{ secrets.PYPI_API_TOKEN }}
          skip-existing: true
          attestations: false