add publishing of pypi to workflow

Author: MOmarMiraj

.github/workflows/wheels.yml

@@ -1,16 +1,16 @@
 name: Release Builder
 on:
-  workflow_dispatch:
-    inputs:
-      build-release:
-        description: 'Do you want to build the release for the Python SDK (this includes the wheels + sdist)?'
-        type: boolean
-        default: false
+  pull_request:
+    branches:
+      - main
+    types:
+      - closed
 
 jobs:
   build_wheels:
     name: Build wheels for Python SDK on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
+    if: github.event.pull_request.merged == true && contains(github.event.pull_request.head.ref, 'sdk-core/')
     strategy:
       matrix: 
         # macOS 13 is an Intel runner and macOS 14 is an Apple Silicon runner 
@@ -21,6 +21,10 @@ jobs:
       # Need to grab the SDK version for the wheel name
       - name: Extract SDK Version
         run: echo "SDK_VERSION=$(python -c 'import version; print(version.SDK_VERSION)')" >> $GITHUB_ENV
+      
+      - name: Install cibuildwheel
+        run: |
+          python -m pip install cibuildwheel
 
       - name: Build wheels
         env:
@@ -33,17 +37,18 @@ jobs:
           MACOSX_DEPLOYMENT_TARGET: 11.0 # Required for building on macOS
           OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.TEST_SERVICE_ACCOUNT_TOKEN }}
           CIBW_ENVIRONMENT_PASS_LINUX: OP_SERVICE_ACCOUNT_TOKEN # to pass in the SA token, for some reason Linux doesn't read the env variables correctly
-
-        uses: pypa/cibuildwheel@v2.23.0
+        run: |
+          python -m cibuildwheel --output-dir dist
 
       - uses: actions/upload-artifact@v4
         with:
           name: onepassword-sdk-${{ env.SDK_VERSION }}-${{ matrix.os }}
-          path: ./wheelhouse/*.whl
+          path: ./dist/*.whl
 
   build-sdist:
     name: Build source distribution for Python SDK
     runs-on: ubuntu-latest
+    if: github.event.pull_request.merged == true && contains(github.event.pull_request.head.ref, 'sdk-core/')
     steps:
         # Need to grab the SDK version for the wheel name
       - name: Extract SDK Version
@@ -67,3 +72,24 @@ jobs:
         with:
           name: onepassword-sdk-${{ env.SDK_VERSION }}
           path: ./dist/*.tar.gz
+  
+  publish-to-pypi:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.merged == true && contains(github.event.pull_request.head.ref, 'sdk-core/')
+    environment:
+      name: testpypi
+      url: https://pypi.org/p/<your-pypi-project-name>
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    needs: [build_wheels, build-sdist]
+    steps:
+      - uses: actions/download-artifact@v2
+        with:
+          name: python-sdk-release
+          path: dist
+
+      - name: Publish package distributions to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/