---
name: Publish Packages

on:
  release:
    types: [published]

env:
  PYTHON_VERSION: 3.13

jobs:
  build-n-publish:
    name: Build Release Packages
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
    - name: Checkout Source Files
      id: checkout
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

    - name: Setup uv
      id: setup-uv
      uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
      with:
        version-file: uv.lock
        python-version: ${{ env.PYTHON_VERSION }}

    - name: Build and Check Packages
      id: build-packages
      uses: ./.github/actions/build-packages

    - name: Publish Release on PyPI
      id: publish-release-on-pypi
      uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
      with:
        # Metadata is already verified by the build action, same as in CI.
        verify-metadata: false