Merge pull request #136 from jupyterhub/dependabot/github_actions/act… #56

	# This is a GitHub workflow defining a set of jobs with a set of steps.
	# ref: https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
	#
	name: Release

	# Always tests wheel building, but only publish to PyPI on pushed tags.
	on:
	pull_request:
	paths-ignore:
	- "docs/**"
	- ".github/workflows/*.yaml"
	- "!.github/workflows/release.yaml"
	push:
	paths-ignore:
	- "docs/**"
	- ".github/workflows/*.yaml"
	- "!.github/workflows/release.yaml"
	branches-ignore:
	- "dependabot/**"
	- "pre-commit-ci-update-config"
	tags: ["**"]
	workflow_dispatch:

	jobs:
	build-release:
	runs-on: ubuntu-22.04
	permissions:
	# id-token=write is required for pypa/gh-action-pypi-publish, and the PyPI
	# project needs to be configured to trust this workflow.
	#
	# ref: https://github.com/jupyterhub/team-compass/issues/648
	#
	id-token: write

	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v4
	with:
	python-version: "3.11"

	- name: install build package
	run: \|
	pip install --upgrade pip
	pip install build
	pip freeze

	- name: build release
	run: \|
	python -m build --sdist --wheel .
	ls -l dist

	- name: publish to pypi
	uses: pypa/gh-action-pypi-publish@release/v1
	if: startsWith(github.ref, 'refs/tags/')

Provide feedback