publish.yml

name: Publish

on:
  workflow_dispatch:
  release:
    types: [published]

env:
  PIP_DISABLE_PIP_VERSION_CHECK: '1'
  FORCE_COLOR: '3'

jobs:
  build:
    name: Build sdist and wheel
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      name: Checkout repository

    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
      with:
        python-version: "3.12"

    - name: Install build tools
      run: |
        pipx run build --outdir dist

    - name: Upload wheel and sdist artifacts
      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
      with:
        name: artifacts
        path: ./dist/*
        if-no-files-found: error

  publish:
    needs: [build]
    name: Upload to PyPI
    runs-on: ubuntu-latest
    environment:
      name: release
      url: https://pypi.org/p/autograd
    permissions:
      id-token: write # mandatory for trusted publishing

    steps:
      - name: Download artifacts
        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
        with:
          path: dist
          merge-multiple: true

      - name: Sanity check artifacts
        run: ls -la dist/

      - name: Publish sdist and wheel to PyPI
        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
        with:
          packages-dir: dist/