ci: Adds (untested) publish action

Author: Alan Christie

.github/workflows/build.yaml

@@ -51,8 +51,8 @@ jobs:
     - name: Test
       run: |
         poetry run pre-commit run --all-files
-        poetry run coverage run -m pytest
+        poetry run coverage run --module pytest
         poetry run coverage report
     - name: Build
       run: |
-        poetry build
+        poetry build --format wheel

.github/workflows/publish.yaml

@@ -0,0 +1,54 @@
+---
+name: publish
+
+# Actions for any tag.
+
+# -----------------
+# Control variables (GitHub Secrets)
+# -----------------
+#
+# At the GitHub 'organisation' or 'project' level you must have the following
+# GitHub 'Repository Secrets' defined (i.e. via 'Settings -> Secrets'): -
+#
+# PYPI_USERNAME
+# PYPI_TOKEN
+#
+# -----------
+# Environment (GitHub Environments)
+# -----------
+#
+# Environment         (none)
+
+on:
+  push:
+    tags:
+    - '**'
+
+env:
+  POETRY_VERSION: '1.8.3'
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    - name: Inject slug/short variables
+      uses: rlespinasse/github-slug-action@v4
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.12'
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install --no-cache-dir poetry==$POETRY_VERSION
+        poetry install --with dev --no-root --no-directory
+    - name: Build
+      run: |
+        poetry version $GITHUB_REF_SLUG
+        poetry build --format wheel
+    - name: Publish
+      uses: pypa/gh-action-pypi-publish@release/v1