Release #46

	name: Release

	on:
	release:
	types: [published]
	workflow_dispatch:
	schedule:
	- cron: "0 3 * * 1"

	env:
	FORCE_COLOR: 3

	permissions: {}

	jobs:
	build:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Setup Python
	uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
	with:
	python-version: "3.12"

	- name: Build
	run: \|
	python -m pip install build
	python -m build .

	- name: Store the distribution packages
	uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
	with:
	name: python-package-distributions
	path: dist/
	if-no-files-found: error

	publish:
	name: Publish to PyPI
	needs: [build]
	runs-on: ubuntu-latest
	if: github.event_name == 'release' && github.event.action == 'published'
	environment:
	name: pypi
	url: https://pypi.org/p/pyodide-cli
	permissions:
	id-token: write # IMPORTANT: mandatory for trusted publishing
	attestations: write
	contents: read
	steps:
	- name: Download all the dists
	uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
	with:
	path: dist/
	merge-multiple: true

	- name: Generate artifact attestations
	uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
	with:
	subject-path: "dist/*"

	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0

Provide feedback