Fix publishing to pypi

Author: max-models

.github/workflows/publish_pypi.yml

@@ -8,6 +8,12 @@ on:
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/template-python/
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - name: Checkout repository
@@ -21,14 +27,10 @@ jobs:
       - name: Install build tools
         run: |
           python -m pip install --upgrade pip
-          pip install build twine
+          pip install build
 
       - name: Build the package
         run: python -m build
 
-      # Uncomment to publish on pypi
-      #- name: Publish to PyPI
-      #  env:
-      #    TWINE_USERNAME: __token__  # Use API token
-      #    TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
-      #  run: twine upload dist/*
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

README.md

@@ -34,3 +34,40 @@ make html
 cd ../
 open docs/_build/html/index.html
 ```
+
+# Publishing on PyPI
+
+This project is configured to automatically publish to PyPI using GitHub Actions with trusted publishing (OIDC).
+
+## Setup (One-time configuration)
+
+### 1. Create PyPI Account and Project
+
+1. Create an account on [PyPI](https://pypi.org/)
+2. Create a new project or claim your project name
+
+### 2. Configure Trusted Publishing on PyPI
+
+1. Go to your PyPI project settings
+2. Navigate to "Publishing" → "Add a new publisher"
+3. Configure the trusted publisher with these details:
+   - **PyPI Project Name**: `template-python` (or your project name)
+   - **Owner**: Your GitHub username/organization
+   - **Repository name**: `template-python`
+   - **Workflow name**: `publish_pypi.yml`
+   - **Environment name**: `pypi`
+
+### 3. Configure GitHub Environment (Optional but Recommended)
+
+1. Go to your GitHub repository → Settings → Environments
+2. Create an environment named `pypi`
+3. Add protection rules:
+   - Deployment branches: Only `main` branch
+
+## Publishing Process
+
+Once configured, publishing is automatic:
+
+1. **Merge to main branch**: Any push to the `main` branch triggers the workflow
+2. **Automatic build**: The workflow builds the Python package
+3. **Automatic publish**: The package is automatically published to PyPI using trusted publishing