publish.yml

# This workflow publishes the package to PyPI on GitHub Release creation.
# Uses Trusted Publisher (OIDC) — no API tokens required.
# Docs: https://docs.pypi.org/trusted-publishers/
#
# Before first use, configure a Trusted Publisher on PyPI:
# https://pypi.org/manage/account/publishing/

name: Publish to PyPI

on:
  release:
    types: [published]

jobs:
  publish:
    name: Publish to PyPI
    runs-on: ubuntu-latest
    environment: pypi-publish
    permissions:
      id-token: write  # Required for Trusted Publisher (OIDC)

    steps:
    - uses: actions/checkout@v6
    - name: Setup Python
      uses: actions/setup-python@v6
      with:
        python-version: "3.12"
    - name: Install build tools
      run: |
        python -m pip install --upgrade pip
        python -m pip install build
    - name: Build package
      run: python -m build
    - name: Publish to PyPI
      uses: pypa/gh-action-pypi-publish@release/v1