publish.yml

name: publish

# Triggered when a GitHub release is published (by release-please or manually).
# Publishes to PyPI using OIDC Trusted Publisher — no API token needed.
# Before this will succeed, configure a Trusted Publisher on PyPI:
# https://docs.pypi.org/trusted-publishers/adding-a-trusted-publisher/

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      tag:
        description: "Tag to publish (e.g. v1.2.3)"
        required: true

jobs:
  publish-pypi:
    name: 📦 publish to PyPI
    runs-on: ubuntu-latest
    environment:
      name: pypi
      url: https://pypi.org/project/dispatchio/
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.release.tag_name || github.event.inputs.tag }}

      - uses: jdx/mise-action@v3
        with:
          cache: true

      - name: Build package
        run: uv build

      - name: Publish to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1