build-publish.yml

---
    name: build-publish
    
    on:
      push:
        branches: [main]
      pull_request:
        branches: [main]
      release:
        types: [published]
    
    jobs:
      build-wheels:
        runs-on: ubuntu-latest
        permissions:
          contents: read
        steps:
          - uses: actions/checkout@v3
          - name: Set up Python
            uses: actions/setup-python@v4
            with:
              python-version: '3.x'
          - name: Install pypa/build
            run: >-
              python -m
              pip install -U
              build
          - name: Build a binary wheel and a source tarball
            run: >-
              python -m
              build
              --sdist
              --wheel
              --outdir dist/
              .
          - name: Store wheels
            uses: actions/upload-artifact@v3
            with:
              path: dist
    
      publish:
        runs-on: ubuntu-latest
        needs:
          - build-wheels
        if: github.event_name == 'release' && github.event.action == 'published'
        steps:
          - name: Download dists
            uses: actions/download-artifact@v3
            with:
              name: artifact
              path: dist
          - name: Publish
            uses: pypa/gh-action-pypi-publish@release/v1
            with:
              password: ${{ secrets.PYPI_API_TOKEN }}