Switch PyPI trusted publishing in dist workflow (#108) #35

	name: Build and publish dist artifacts

	on:
	pull_request:
	branches:
	- 'dependabot/*/cibuildwheel-'
	push:
	branches:
	- master
	tags:
	- 'v*'
	workflow_dispatch:

	jobs:
	build_wheels:
	name: Build and test wheels on ${{ matrix.os }}
	runs-on: ${{ matrix.os }}
	strategy:
	fail-fast: false
	matrix:
	os: [ubuntu-latest, windows-latest, macos-latest]

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Build wheels and test
	uses: pypa/[email protected]

	- name: Upload artifacts
	uses: actions/upload-artifact@v3
	with:
	path: ./wheelhouse/*.whl

	build_sdist:
	name: Build sdist
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Build sdist
	run: pipx run build --sdist

	- uses: actions/upload-artifact@v3
	with:
	path: dist/*.tar.gz

	publish:
	name: Publish to PyPI
	needs: [build_wheels, build_sdist]
	runs-on: ubuntu-latest
	if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
	environment:
	name: pypi
	url: https://pypi.org/p/ndsplines
	permissions:
	id-token: write
	steps:
	- name: Download artifacts
	uses: actions/download-artifact@v3
	with:
	name: artifact
	path: dist

	- name: Publish dist to PyPI
	uses: pypa/[email protected]

Provide feedback