deploy.yml

name: deploy

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Release version'
        required: true
        default: '1.2.3'

jobs:

  package:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v5

    - name: Build and Check Package
      uses: hynek/build-and-inspect-python-package@v2.13

  deploy:
    needs: package
    runs-on: ubuntu-latest
    permissions:
      id-token: write  # For PyPI trusted publishers.
      contents: write  # For tag.

    steps:
    - uses: actions/checkout@v5

    - name: Download Package
      uses: actions/download-artifact@v5
      with:
        name: Packages
        path: dist

    - name: Publish package to PyPI
      uses: pypa/gh-action-pypi-publish@v1.13.0
      with:
        attestations: true

    - name: GitHub Release
      env:
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      run: |
        gh release create v${{ github.event.inputs.version }} --target=${{ github.ref_name }} --title v${{ github.event.inputs.version }}
        gh pr merge ${{ github.ref_name }} --merge