Merge pull request #35 from melexis/fix-release

upgrade github actions

Author: JasperCraeghs

.github/workflows/python-package.yml

@@ -1,19 +1,23 @@
 name: Test and deploy on tag
 
 on: push
-
+permissions:
+  contents: write
+  id-token: write # IMPORTANT for OIDC
 jobs:
   test:
-
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
         python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
-    - uses: actions/checkout@v4
+    - name: Checkout code
+      uses: actions/checkout@v5
+      with:
+        fetch-depth: 0  # Required for setuptools-scm
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install dependencies
@@ -23,7 +27,7 @@ jobs:
     - name: Run test
       run: tox -e py
     - name: Upload coverage to Codecov
-      if: matrix.python-version == 3.13
+      if: matrix.python-version == '3.13'
       uses: codecov/codecov-action@v5
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
@@ -32,28 +36,38 @@ jobs:
         flags: unittests
         verbose: true
     - name: Static checks
-      if: matrix.python-version == 3.13
+      if: matrix.python-version == '3.13'
       run: tox -e check
 
   deploy:
-
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
     needs: test
     runs-on: ubuntu-latest
+    environment:
+      name: release
+      url: https://pypi.org/p/mlx.jira_juggler
     steps:
-    - uses: actions/checkout@v4
+    - name: Checkout code
+      uses: actions/checkout@v5
+      with:
+        fetch-depth: 0  # Required for setuptools-scm
+
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: '3.13'
+
     - name: Install dependencies
       run: |
-        python -m pip install --upgrade pip
-        pip install setuptools wheel twine
-    - name: Build and publish
+        python -m pip install --upgrade build twine wheel setuptools-scm
+    - name: Build package
+      run: python -m build --wheel
+
+    - name: Check package
+      run: twine check dist/*
+
+    - name: Publish to PyPI
       env:
-        TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-      run: |
-        python -m build --wheel
-        twine upload dist/*
+        TWINE_USERNAME: __token__
+        TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+      run: twine upload dist/*