Bump the ci-dependencies group with 2 updates #20

	name: Publish Python 🐍 distributions 📦 to PyPI

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	release:
	types:
	- published

	jobs:
	build:
	name: Build distribution 📦
	runs-on: ubuntu-latest
	permissions:
	attestations: write
	id-token: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

	- name: Build and inspect Python 🐍 package 📦
	uses: hynek/build-and-inspect-python-package@73aea398b9c8de9ea9e4464c6b13cb8b1f3d6294 # v2.9.0
	with:
	attest-build-provenance-github: ${{ github.event.action == 'published' }}

	publish-to-pypi:
	name: Publish Python 🐍 distribution 📦 to PyPI
	needs: build
	if: ${{ github.event.action == 'published' }}
	runs-on: ubuntu-latest
	environment:
	name: pypi
	url: https://pypi.org/project/crazylibs/${{ github.ref_name }}
	permissions:
	id-token: write

	steps:
	- name: Download dists
	uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
	with:
	name: Packages
	path: dist/

	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1
	with:
	attestations: true
	verbose: true
	print-hash: true

Provide feedback