Prepare release notes for v0.1.0 #1

	name: Publish to PyPI

	on:
	push:
	tags:
	- "v*"

	permissions: {}

	concurrency:
	group: publish

	jobs:
	build:
	name: Build distribution
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	# Cache disabled to prevent cache-poisoning attacks on release artifacts.
	- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
	with:
	enable-cache: false

	- name: Build
	run: uv build

	- name: Upload distribution
	uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
	with:
	name: dist
	path: dist/

	publish:
	name: Publish to PyPI
	needs: build
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	attestations: write
	# Requires environment protection rules in GitHub Settings:
	# Settings > Environments > pypi > Add required reviewers
	# and restrict deployment to v* tags.
	environment:
	name: pypi
	url: https://pypi.org/p/AirPostgres
	steps:
	- name: Download distribution
	uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
	with:
	name: dist
	path: dist/

	- name: Attest build provenance
	uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
	with:
	subject-path: "dist/*"

	- name: Publish to PyPI
	uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

Navigation Menu