ci_publish.yml

name: Publish

on:
  release:
    types:
      - created
  workflow_dispatch:

permissions:
  contents: read

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v6
        with:
          python-version: "3.12"
          cache: pip
      - name: Install release tools
        run: python -m pip install poetry==2.3.2 twine==6.2.0
      - name: Test release source
        run: |
          poetry install --all-extras
          poetry run pytest -q
          poetry check
      - name: Build and validate distributions
        run: |
          poetry build
          python -m twine check dist/*
      - name: Publish validated distributions
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          user: __token__
          password: ${{ secrets.PYPI_TOKEN }}