python-publish.yml

# Publish the built Python package to PyPI when a GitHub Release is published.
# For more information, see https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-python#publishing-to-package-registries

name: Upload Python Package

on:
    release:
        types: [published]

permissions:
    contents: read

jobs:
    publish:
        runs-on: ubuntu-latest
        environment: release
        permissions:
            # IMPORTANT: this permission is mandatory for trusted publishing
            id-token: write

        steps:
            - uses: actions/checkout@v7
              with:
                  fetch-depth: 0
            - uses: actions/setup-python@v6
              with:
                  python-version: "3.12"
            - uses: pdm-project/setup-pdm@v4
            - name: Build package
              run: pdm build
            - name: Publish package with Trusted Publishing
              uses: pypa/gh-action-pypi-publish@release/v1