deployment to PyPI using the trusted publisher route #28

	name: Publish tag to PyPI

	on:
	push:
	tags: [ 'v*' ]

	concurrency:
	group: tag-${{github.ref}}
	cancel-in-progress: true

	jobs:
	release_to_pypi:
	name: cwl-utils release test
	runs-on: ubuntu-24.04
	environment: PyPI
	permissions:
	id-token: write
	steps:
	- uses: actions/checkout@v4

	- name: Set up Singularity
	run: \|
	wget --no-verbose https://github.com/sylabs/singularity/releases/download/v4.2.1/singularity-ce_4.2.1-noble_amd64.deb
	sudo apt-get install -y ./singularity-ce_4.2.1-noble_amd64.deb

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: 3.12

	- name: Cache for pip
	uses: actions/cache@v4
	with:
	path: ~/.cache/pip
	key: ${{ runner.os }}-pip-release-${{ hashFiles('requirements.txt', 'test-requirements.txt') }}

	- name: Install packages
	run: \|
	pip install -U pip setuptools wheel
	pip install virtualenv

	- name: Release test
	env:
	RELEASE_SKIP: head
	run: ./release-test.sh

	- name: Publish package
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	packages-dir: testenv2/src/cwl-utils/dist/

Provide feedback