release flow

Author: deeleeramone

.github/workflows/publish-pywry.yml

@@ -1,15 +1,18 @@
 name: Publish pywry to PyPI
 
 on:
-  release:
-    types: [published]
   workflow_dispatch:
     inputs:
       skip_tests:
         description: 'Skip running tests (use with caution)'
         required: false
         default: false
         type: boolean
+      publish_to_pypi:
+        description: 'Publish wheels to PyPI after build + test'
+        required: false
+        default: false
+        type: boolean
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -433,14 +436,14 @@ jobs:
 
     steps:
       - name: Download all wheel artifacts
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v8.0.1
         with:
           pattern: wheels-*
           merge-multiple: true
           path: dist/
 
       - name: Download sdist
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v8.0.1
         with:
           name: sdist
           path: dist/
@@ -649,15 +652,6 @@ jobs:
       contents: write
 
     steps:
-      - name: Download dist artifacts
-        uses: actions/download-artifact@v5
-        with:
-          name: dist
-          path: dist/
-
-      - name: List artifacts
-        run: ls -la dist/
-
       - name: Create draft release
         uses: softprops/action-gh-release@v2
         with:
@@ -666,8 +660,6 @@ jobs:
           draft: true
           prerelease: false
           generate_release_notes: true
-          files: |
-            dist/*
           body: |
             ## pywry ${{ needs.merge-artifacts.outputs.version }}
 
@@ -692,19 +684,20 @@ jobs:
 
             - Python 3.10, 3.11, 3.12, 3.13, 3.14
 
-            ### Artifacts
-
-            All artifacts include SLSA build provenance attestations.
-
             ---
-            *This is a draft release. Review and publish to trigger PyPI upload.*
+            *This is a draft release. Wheels are published to PyPI separately.*
 
   # =============================================================================
-  # Step 6: Publish to PyPI (on release publish) - Trusted Publisher
+  # Step 6: Publish to PyPI - Trusted Publisher (workflow_dispatch only)
   # =============================================================================
   publish-pypi:
     name: Publish to PyPI
-    if: github.event_name == 'release' && github.event.action == 'published'
+    needs: [merge-artifacts, test-wheels]
+    if: >-
+      always()
+      && needs.merge-artifacts.result == 'success'
+      && (needs.test-wheels.result == 'success' || needs.test-wheels.result == 'skipped')
+      && inputs.publish_to_pypi
     runs-on: ubuntu-24.04
     defaults:
       run:
@@ -713,19 +706,14 @@ jobs:
       id-token: write
 
     steps:
-      - name: Download release assets
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          mkdir -p dist
-          gh release download ${{ github.event.release.tag_name }} --dir dist --repo ${{ github.repository }}
+      - name: Download dist artifacts
+        uses: actions/download-artifact@v5
+        with:
+          name: dist
+          path: dist/
 
-      - name: Filter only distribution files
+      - name: List distribution files
         run: |
-          mkdir -p clean_dist
-          mv dist/*.whl dist/*.tar.gz clean_dist/ 2>/dev/null || true
-          rm -rf dist
-          mv clean_dist dist
           echo "📦 Publishing to PyPI:"
           ls -la dist/