ci: fix Build & verify and coverage on 3.14 #585

	name: Package

	on:
	workflow_dispatch:
	pull_request:
	push:
	branches:
	- main
	- v*
	release:
	types:
	- published

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions: {}

	jobs:
	build-package:
	name: Build & verify
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false
	- uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5 # v3.0.1

	release-pypi:
	name: Publish to pypi.org
	environment: release
	runs-on: ubuntu-latest
	needs: build-package
	if: github.event_name == 'release' && github.event.action == 'published'
	permissions:
	id-token: write # OIDC for PyPI trusted publishing
	attestations: write # Artifact attestation signing

	steps:
	- name: Download packages built by build-and-inspect-python-package
	uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
	with:
	name: Packages
	path: dist

	- name: Generate artifact attestation for sdist and wheel
	uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
	with:
	subject-path: "dist/pyproject*"

	- name: Upload package to PyPI
	uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1

Navigation Menu