Bump actions/checkout in the github-actions group across 1 directory … #5

	name: Publish Python 🐍 distribution 📦 to PyPI

	on: push

	jobs:
	build:
	name: Build distribution 📦
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: "3.x"

	- name: Install pypa/build
	run: >-
	python3 -m
	pip install
	build
	--user

	- name: Build a binary wheel and a source tarball
	run: python3 -m build

	- name: Store the distribution packages
	uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
	with:
	name: python-package-distributions
	path: dist/

	publish-to-pypi:
	name: >-
	Publish Python 🐍 distribution 📦 to PyPI
	if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
	needs:
	- build
	runs-on: ubuntu-latest
	environment:
	name: pypi
	url: https://pypi.org/p/napari-matplotlib # Replace <package-name> with your PyPI project name
	permissions:
	id-token: write # IMPORTANT: mandatory for trusted publishing

	steps:
	- name: Download all the dists
	uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
	with:
	name: python-package-distributions
	path: dist/
	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0

Provide feedback