use upload-artifact GitHub Action to allow using dists between jobs

Author: dchukhin

.github/workflows/build.yml

@@ -20,6 +20,11 @@ jobs:
       run: pip install hatch
     - name: Build a binary wheel and a source tarball
       run: hatch build
+    - name: Store the distribution packages
+      uses: actions/upload-artifact@v4
+      with:
+        name: python-package-distributions
+        path: dist/
 
   pypi-publish:
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
@@ -32,10 +37,11 @@ jobs:
     permissions:
       id-token: write
     steps:
-    - name: Install hatch
-      run: pip install hatch
-    - name: Build a binary wheel and a source tarball
-      run: hatch build
+    - name: Download all the dists
+      uses: actions/download-artifact@v4
+      with:
+        name: python-package-distributions
+        path: dist/
     - name: Publish distribution to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
 
@@ -52,10 +58,11 @@ jobs:
       id-token: write  # IMPORTANT: mandatory for sigstore
 
     steps:
-    - name: Install hatch
-      run: pip install hatch
-    - name: Build a binary wheel and a source tarball
-      run: hatch build
+    - name: Download all the dists
+      uses: actions/download-artifact@v4
+      with:
+        name: python-package-distributions
+        path: dist/
     - name: Sign the dists with Sigstore
       uses: sigstore/gh-action-sigstore-python@v2.1.1
       with: