Backport PR #42 on branch versions/v0.2.x (build(deps): bump the actions group with 4 updates) #117

	name: CD

	on:
	workflow_dispatch:
	pull_request:
	push:
	branches:
	- main
	release:
	types:
	- published

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	env:
	# Many color libraries just need this to be set to any value, but at least
	# one distinguishes color depth, where "3" -> "256-bit color".
	FORCE_COLOR: 3

	jobs:
	dist:
	name: Distribution build
	permissions:
	contents: read
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	fetch-depth: 0
	persist-credentials: false
	- uses: hynek/build-and-inspect-python-package@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e # v2.17.0

	test-publish:
	needs: [dist]
	name: Publish to TestPyPI
	environment:
	name: testpypi
	permissions:
	id-token: write
	runs-on: ubuntu-latest
	if: github.event_name == 'release' && github.event.action == 'published'

	steps:
	- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
	with:
	name: Packages
	path: dist

	- uses: pypa/gh-action-pypi-publish@release/v1
	if: github.event_name == 'release' && github.event.action == 'published'
	with:
	repository-url: https://test.pypi.org/legacy/

	publish:
	needs: [test-publish]
	name: Publish to PyPI
	environment: pypi
	permissions:
	id-token: write
	runs-on: ubuntu-latest
	if: github.event_name == 'release' && github.event.action == 'published'

	steps:
	- uses: actions/download-artifact@v8
	with:
	name: Packages
	path: dist

	- uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback