Split build and publish environments for PyPI releases via GitHub Actions

nathanjmcdougall · nathanjmcdougall · commit c4bb3f421e3f · 2025-11-10T19:33:12.000+13:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,16 +5,12 @@ on:
     tags:
       - "v*"
 jobs:
-  deploy:
-    name: Release
-
+  build:
+    name: Build Distributions
     runs-on: ubuntu-latest
-    environment: release
-    permissions:
-      id-token: write # Needed for trusted publishing
+
     steps:
-      - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
@@ -24,12 +20,32 @@ jobs:
           version: "latest"
           enable-cache: false
 
-      - name: "Set up Python"
-        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+      - name: Build distributions
+        run: uv build
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: dists
+          path: dist/
+          if-no-files-found: error
+
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # for Trusted Publishing
+    needs: build
+
+    environment: release
+
+    steps:
+      - name: Download distributions
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
-          python-version: 3.12
+          name: dists
+          path: dist/
 
-      - name: Release
+      - name: Publish
         run: |
-          uv build
-          uv publish --trusted-publishing always
+          uv publish --trusted-publishing always dist/*
