fixed publish workflow

Author: nklsw

.github/workflows/publish.yml

@@ -2,29 +2,40 @@ name: Publish
 
 on:
   release:
-    types: ["published"]
+    types: [published]
+  workflow_dispatch: # Enable manual trigger.
 
 jobs:
-  run:
-    name: "Build and publish release"
+  build-and-publish:
     runs-on: ubuntu-latest
-
+    permissions:
+      id-token: write # Mandatory for OIDC.
+      contents: read
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout (official GitHub action)
+        uses: actions/checkout@v4
+        with:
+          # Important for versioning plugins:
+          fetch-depth: 0
 
-      - name: Install uv
+      - name: Install uv (official Astral action)
         uses: astral-sh/setup-uv@v5
         with:
+          version: "0.6.14"
           enable-cache: true
-          cache-dependency-glob: uv.lock
+          python-version: "3.12"
+
+      - name: Set up Python (using uv)
+        run: uv python install
 
-      - name: Set up Python
+      - name: Install all dependencies
         run: uv sync --all-extras --dev
 
-      - name: Build
+      - name: Run tests
+        run: uv run pytest
+        
+      - name: Build package
         run: uv build
 
-      - name: Publish
-        env:
-          TOKEN: ${{ secrets.PYPI_TOKEN }}
-        run: uv publish --token "$TOKEN"
+      - name: Publish to PyPI (using uv)
+        uses: pypa/gh-action-pypi-publish@release/v1