Set up trusted publishing #38

	name: CI
	on:
	push:
	branches:
	- master
	pull_request:
	branches:
	- master
	jobs:
	Test:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	include:
	- python-version: "3.10"
	- python-version: "3.11"
	- python-version: "3.12"
	steps:
	- uses: actions/checkout@v4
	- uses: astral-sh/setup-uv@v5
	with:
	python-version: "${{ matrix.python-version }}"
	cache-dependency-glob: pyproject.toml
	- run: uvx --with=tox-gh --with=tox-uv tox
	Lint:
	runs-on: ubuntu-24.04
	steps:
	- uses: actions/checkout@v4
	- uses: akx/[email protected]
	Build:
	needs:
	- Test
	- Lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: astral-sh/setup-uv@v5
	- run: uv build
	- name: Upload artifact
	uses: actions/upload-artifact@v4
	with:
	name: dist
	path: dist
	Publish:
	if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
	needs:
	- Build
	name: Upload release to PyPI
	runs-on: ubuntu-latest
	environment:
	name: release
	url: https://pypi.org/p/django-managerie/
	permissions:
	id-token: write
	steps:
	- uses: actions/download-artifact@v4
	with:
	name: dist
	path: dist/
	- name: Publish package distributions to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	verbose: true
	print-hash: true

Provide feedback