deploy.yml

name: PyPI
on:
  push:
    tags: v[0-9]+.[0-9]+.[0-9]+
jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: Deploy
    # Authenticates with PyPI via OIDC
    permissions:
      id-token: write
    steps:
      - name: "Checkout repository"
        uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4
      - name: "Setup Python"
        uses: "actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065" # v5.6.0
        with:
          python-version: "3.x"

      - name: "Build dists"
        run: |
          python -m pip install -r .github/workflows/deploy-requirements.txt
          SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct) \
          python -m build

      - name: "Publish dists to PyPI"
        uses: "pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc" # v1.12.4