0.0.33 #4

	on:
	release:
	types:
	- published

	name: release

	permissions:
	# Needed to access the workflow's OIDC identity.
	id-token: write

	# Needed to upload release assets.
	contents: write

	jobs:
	pypi:
	name: upload release to PyPI
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-python@v5
	with:
	python-version: ">= 3.7"

	- name: deps
	run: python -m pip install -U setuptools build wheel

	- name: build
	run: python -m build

	- name: publish
	uses: pypa/gh-action-pypi-publish@release/v1

	- name: sign
	uses: sigstore/gh-action-sigstore-python@v2.1.1
	with:
	inputs: ./dist/.tar.gz ./dist/.whl

	- name: upload artifacts to github
	# Confusingly, this action also supports updating releases, not
	# just creating them. This is what we want here, since we've manually
	# created the release that triggered the action.
	uses: softprops/action-gh-release@v1
	with:
	# dist/ contains the built packages, which smoketest-artifacts/
	# contains the signatures and certificates.
	files: dist/*

Provide feedback