Create reusable build workflow for publishing

Author: ok-nick

.github/workflows/build.yml

@@ -1,17 +1,8 @@
 name: Build
 
 on:
-  pull_request:
-  push:
-    branches:
-      - main
-    tags:
-      - "*"
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   linux:
     runs-on: ubuntu-latest
@@ -20,7 +11,7 @@ jobs:
         target: [x86_64, aarch64]
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
           cache: "pip"
@@ -67,7 +58,7 @@ jobs:
         target: [x64, x86]
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: '3.10'
           architecture: ${{ matrix.target }}
@@ -89,7 +80,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: '3.10'
           cache: "pip"
@@ -110,7 +101,7 @@ jobs:
     runs-on: macos-latest-large
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: '3.10'
           cache: "pip"
@@ -141,3 +132,4 @@ jobs:
         with:
           name: wheels
           path: dist
+

.github/workflows/ci-build.yml

@@ -0,0 +1,14 @@
+name: CI Build
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+    tags:
+      - "*"
+  workflow_dispatch:
+
+jobs:
+  build:
+    uses: ./.github/workflows/build.yml

.github/workflows/publish.yml

@@ -6,15 +6,15 @@ on:
       - "*"
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
+  build:
+    uses: ./.github/workflows/build.yml
+
   release:
     name: Release
     runs-on: ubuntu-latest
     environment: Publish
-    needs: [linux, windows, macos_x86, macos_aarch64, sdist]
+    needs: [build]
     steps:
       - uses: actions/download-artifact@v4
         with: