[ci] Move to trusted publishers #395

	name: CI

	on:
	pull_request:
	push:
	branches: [master]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	pre-commit:
	name: Format
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: "3.x"
	- name: Check manifest
	uses: pre-commit/[email protected]
	with:
	extra_args: --hook-stage manual

	checks:
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	matrix:
	python-version:
	- "3.8"
	- "3.9"
	- "3.10"
	- "3.11"
	- "3.12"

	name: Check Python ${{ matrix.python-version }}
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-python@v5
	with:
	python-version: "3.x"

	- name: Install package
	run: python -m pip install -e .[test]

	- name: Test package
	run: python -m pytest --doctest-modules --cov=src/hepunits --cov-report=xml

	- name: Test coverage with Codecov
	uses: codecov/codecov-action@v4

Provide feedback