Attempt to use trusted publishing

Actions rework loosely based on ufmt's

Author: thatch

.github/workflows/build.yml

@@ -10,12 +10,12 @@ on:
   pull_request:
 
 jobs:
-  indexurl:
+  test:
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.10", "3.11", "3.12"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
         os: [macOS-latest, ubuntu-latest, windows-latest]
 
     steps:
@@ -25,6 +25,7 @@ jobs:
         uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
+      - uses: astral-sh/setup-uv@v3
       - name: Install
         run: |
           python -m pip install --upgrade pip
@@ -34,3 +35,36 @@ jobs:
         run: make test
       - name: Lint
         run: make lint
+        if: matrix.python-version != "3.9"
+
+  build:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - uses: astral-sh/setup-uv@v3
+      - name: Install
+        run: uv pip install build
+      - name: Build
+        run: python -m build
+      - name: Upload
+        uses: actions/upload-artifact@v3
+        with:
+          name: sdist
+          path: dist
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v3
+        with:
+          name: sdist
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@release/v1

Makefile

@@ -1,9 +1,10 @@
 PYTHON?=python
 SOURCES=indexurl setup.py
+UV?=uv
 
 .PHONY: venv
 venv:
-	$(PYTHON) -m venv .venv
+	$(UV) venv .venv
 	source .venv/bin/activate && make setup
 	@echo 'run `source .venv/bin/activate` to use virtualenv'
 
@@ -12,7 +13,7 @@ venv:
 
 .PHONY: setup
 setup:
-	python -m pip install -Ue .[dev,test]
+	uv pip install -e .[dev,test]
 
 .PHONY: test
 test:
@@ -29,9 +30,3 @@ lint:
 	python -m flake8 $(SOURCES)
 	python -m checkdeps --allow-names indexurl indexurl
 	mypy --strict --install-types --non-interactive indexurl
-
-.PHONY: release
-release:
-	rm -rf dist
-	python setup.py sdist bdist_wheel
-	twine upload dist/*