CI: don't build for Python versions in security phase #131

	name: build & test

	on: [push]

	jobs:
	build:
	strategy:
	matrix:
	os: [ubuntu-latest, macos-latest, windows-latest]
	runs-on: ${{ matrix.os }}
	env:
	CIBW_SKIP: "p36- p37- p38-* p39-*"
	CIBW_ARCHS: auto64
	CIBW_ARCHS_MACOS: "x86_64 arm64"
	MACOSX_DEPLOYMENT_TARGET: "10.14"
	steps:
	- uses: actions/checkout@v4
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.x"
	- name: cache native taglib build artifacts
	uses: actions/cache@v4
	with:
	path: build/taglib
	key: taglib-${{ matrix.os }}-${{ hashFiles('build_taglib.py') }}
	- name: install pip dependencies (Linux)
	if: ${{ runner.os == 'Linux' }}
	run: \|
	python -m pip install --upgrade pip build
	- name: sdist (Linux)
	if: ${{ runner.os == 'Linux' }}
	run: python -m build --sdist
	- name: upload sdist (Linux)
	uses: actions/upload-artifact@v3
	if: ${{ runner.os == 'Linux' }}
	with:
	name: sdist
	path: dist
	retention-days: 5
	- name: build binary wheels
	uses: pypa/[email protected]
	- name: upload wheels
	uses: actions/upload-artifact@v3
	with:
	name: bdist
	path: ./wheelhouse/*.whl
	retention-days: 5
	publish:
	runs-on: ubuntu-latest
	needs: build
	if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
	steps:
	- name: download source wheel
	uses: actions/download-artifact@v3
	with:
	name: sdist
	path: wheels
	- name: download binary wheels
	uses: actions/download-artifact@v3
	with:
	name: bdist
	path: wheels
	- name: publish package pypi.org
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	user: __token__
	password: ${{ secrets.PYPI_API_TOKEN }}
	skip-existing: true
	packages-dir: wheels

Provide feedback