Reworked CI

.github/workflows/ci.yml

@@ -39,11 +39,16 @@ jobs:
       - run: python -m pip install -r requirements.txt
       - run: python test.py
 
-  tag:
+  tag_and_publish:
     runs-on: ubuntu-latest
     needs: test
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-tags: true
 
       - name: setup git
         run: |
@@ -64,26 +69,19 @@ jobs:
       - name: Push Tag
         run: git push origin ${{ steps.git_version.outputs.version }}
 
-  publish:
+      - name: Set up Python
-    needs: tag
+        uses: actions/setup-python@v5
-    runs-on: ubuntu-latest
+        with:
+          python-version: '3.12'
 
-    steps:
+      - name: Install dependencies
-    - uses: actions/checkout@v4
+        run: |
-
+          python -m pip install --upgrade pip
-    - name: Set up Python
+          pip install -r requirements.build.txt
-      uses: actions/setup-python@v5
+          python setup.py sdist bdist_wheel
-      with:
-        python-version: '3.12'
-
-    - name: Install dependencies
-      run: |
-        python -m pip install --upgrade pip
-        pip install -r requirements.build.txt
-
-    - name: Build and publish
-      uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
 
+      - name: Build and publish
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          user: __token__
+          password: ${{ secrets.PYPI_API_TOKEN }}

requirements.build.txt

@@ -23,3 +23,5 @@ twine==5.0.0
 urllib3==2.2.1
 wheel==0.43.0
 zipp==3.18.1
+
+-r requirements.txt