on: [push]
jobs:
  publish:
    if: startsWith(github.ref, 'refs/tags')
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
    - uses: actions/checkout@v6
    - uses: actions/setup-python@v6
    - run: pip install build
    - name: build
      run: python3 -m build
    - name: publish
      uses: pypa/gh-action-pypi-publish@release/v1