name: Publish to PyPI

on:

push:

tags:

- "v*"

jobs:

build-and-publish:

name: Build and publish to PyPI

runs-on: ubuntu-latest

permissions:

id-token: write

contents: read

steps:

- uses: actions/checkout@v6

- name: Set up Python 3.12

uses: actions/setup-python@v6

with:

python-version: "3.12"

- name: Validate tag matches version

run: |

TAG_VERSION=${GITHUB_REF#refs/tags/v}

TOML_VERSION=$(python -c "import tomllib; print(tomllib.load(open('pyproject.toml', 'rb'))['project']['version'])")

if [ "$TAG_VERSION" != "$TOML_VERSION" ]; then

echo "Error: Tag version ($TAG_VERSION) doesn't match pyproject.toml ($TOML_VERSION)"

exit 1

fi

echo "Version validated: $TOML_VERSION"

- name: Install build tools

run: |

python -m pip install --upgrade pip

pip install build

- name: Build package

run: |

python -m build

- name: Publish to PyPI

uses: pypa/gh-action-pypi-publish@release/v1