build: automate publish on release (#229)

Author: mplatzer

.github/workflows/release-2-publish.yml

@@ -1,26 +1,35 @@
 name: Release Step 2 - Publish to PyPI
-run-name: publish to pypi ${{ github.event.release.tag_name }}
+run-name: publish to pypi
 
 on:
-  release:
-    types: [published]
+  workflow_run:
+    workflows: ["Release Step 1 - Release on GitHub"] # Must match name exactly
+    types: [completed]
+  workflow_dispatch:
+    inputs:
+      ref:
+        description: 'Branch or tag to publish'
+        default: 'main'
+        required: false
 
 jobs:
   pypi-publish:
+    # Only run if Step 1 was successful, or if triggered manually
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
     name: Build and publish Python package
     runs-on: ubuntu-latest
     environment: release
 
-    # Required for PyPI Trusted Publishing
     permissions:
-      id-token: write
+      id-token: write # Required for PyPI Trusted Publishing
       contents: read
 
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
-          ref: ${{ github.event.release.tag_name }}
+          # Use branch from trigger, or default to main
+          ref: ${{ github.event.workflow_run.head_branch || inputs.ref || 'main' }}
 
       - name: Install uv
         uses: astral-sh/setup-uv@v5