ci: add forgotten step #537

	---
	name: Build & maybe upload PyPI package

	on:
	push:
	branches: [main]
	tags: ["*"]
	release:
	types:
	- published
	workflow_dispatch:

	permissions:
	contents: read
	id-token: write

	env:
	FORCE_COLOR: "1" # Make tools pretty.
	PIP_DISABLE_PIP_VERSION_CHECK: "1"
	PIP_NO_PYTHON_VERSION_WARNING: "1"

	jobs:
	# Always build & lint package.
	build-package:
	name: Build & verify package
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- uses: hynek/build-and-inspect-python-package@v2

	# Upload to Test PyPI on every commit on main.
	release-test-pypi:
	name: Publish in-dev package to test.pypi.org
	environment: release-test-pypi
	if: github.repository_owner == 'hynek' && github.event_name == 'push' && github.ref == 'refs/heads/main'
	runs-on: ubuntu-latest
	needs: build-package

	steps:
	- name: Download packages built by build-and-inspect-python-package
	uses: actions/download-artifact@v4
	with:
	name: Packages
	path: dist

	- name: Upload package to Test PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	repository-url: https://test.pypi.org/legacy/

	# Upload to real PyPI on GitHub Releases.
	release-pypi:
	name: Publish released package to pypi.org
	environment: release-pypi
	if: github.repository_owner == 'hynek' && github.event.action == 'published'
	runs-on: ubuntu-latest
	needs: build-package

	steps:
	- name: Download packages built by build-and-inspect-python-package
	uses: actions/download-artifact@v4
	with:
	name: Packages
	path: dist

	- name: Upload package to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback