ci: trusted publish (#480)

* trusted publish

* ci: trusted publish

* ci: trusted publish

* [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

.github/workflows/cd.yml

@@ -3,27 +3,22 @@ name: CD
 on:
  workflow_dispatch:
  pull_request:
+ push:
  branches:
- - master
+  - master
  release:
  types:
- - published
+  - published
 
 jobs:
  dist:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
-
- - name: Build wheel and SDist
- run: pipx run build
-
- - uses: actions/upload-artifact@v3
- with:
- path: dist/*
+ - uses: actions/checkout@v4
+ with:
+ fetch-depth: 0
 
- - name: Check metadata
- run: pipx run twine check dist/*
+ - uses: hynek/build-and-inspect-python-package@v2
 
  publish:
  needs: [dist]