v0.2.0 #1

	name: Publish to PyPI

	on:
	release:
	types: [created] # Run when you click "Publish release"
	workflow_dispatch: # ... or run it manually from the Actions tab

	permissions:
	contents: read

	jobs:
	release-build:
	runs-on: ubuntu-latest

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Python 3.13
	uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
	with:
	python-version: "3.13"
	cache: pip
	cache-dependency-path: pyproject.toml

	- name: Build package
	run: \|
	python -m pip install --upgrade pip
	python -m pip install build twine
	twine check dist/*
	- name: Upload dist artefact
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	with:
	name: dist
	path: dist/

	# Publish to PyPI (only if "dist/" succeeded)
	pypi-publish:
	needs: release-build
	runs-on: ubuntu-latest
	environment: pypi

	permissions:
	id-token: write # OIDC token for trusted publishing

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
	with:
	egress-policy: audit

	- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
	with:
	name: dist
	path: dist/

	- uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # release/v1
	with:
	verbose: true

Provide feedback