build

Use PyPI trusted publisher in CI deploy job #64

	name: build

	on:
	push:
	branches:
	pull_request:
	branches:

	permissions:
	contents: read

	jobs:
	test:
	name: Test - Python ${{ matrix.python-version }}
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]

	steps:
	- uses: actions/checkout@v4
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	- name: Upgrade Pip
	run: python -m pip install -U pip
	- name: Install package and development dependencies
	run: python -m pip install -e .[dev]
	- name: Test with pytest
	run: \|
	pytest

	deploy:
	name: Deploy
	environment: Deployment
	needs: test
	runs-on: ubuntu-latest
	if: github.ref=='refs/heads/main' && github.event_name!='pull_request'

	permissions:
	contents: write
	id-token: write

	steps:
	- uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.10"

	- name: Check release
	id: check_release
	run: \|
	python -m pip install autopub[github]
	autopub check

	- name: Publish
	if: ${{ steps.check_release.outputs.autopub_release=='true' }}
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	autopub prepare
	autopub commit
	autopub build
	autopub githubrelease

	- name: Upload package to PyPI
	if: ${{ steps.check_release.outputs.autopub_release=='true' }}
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback