Add a GitHub Action to publish releases on PyPI (#65)

* dependabot GHA updates

* add GHA PyPI

* simplify and cleanup

* try to restrict linting to py310

Author: ocefpaf

.github/dependabot.yml

@@ -0,0 +1,15 @@
+# See https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/keeping-your-actions-up-to-date-with-dependabot
+
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    labels:
+      - "Bot"
+    groups:
+      github-actions:
+        patterns:
+          - '*'

.github/workflows/pypi.yml

@@ -0,0 +1,52 @@
+name: Publish to PyPI
+
+on:
+  pull_request:
+  push:
+  release:
+    types:
+      - published
+
+jobs:
+  pypi-publish:
+    name: Upload release to PyPI
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/xarray_subset_grid/
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      with:
+        # Should be enough for setuptools-scm
+        fetch-depth: 100
+        persist-credentials: false
+
+    - name: Get tags
+      run: git fetch origin 'refs/tags/*:refs/tags/*'
+
+    - name: Set up Python
+      uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
+      with:
+        python-version: "3.x"
+
+    - name: Install build tools
+      run: |
+        python -m pip install --upgrade pip build twine
+
+    - name: Build binary wheel
+      run: python -m build --sdist --wheel . --outdir dist
+
+    - name: CheckFiles
+      run: |
+        ls -lh dist
+
+    - name: Test wheels
+      run: |
+        cd dist && python -m pip install xarray_subset_grid*.whl
+        python -m twine check *
+
+    - name: Publish package distributions to PyPI
+      if: success() && github.event_name == 'release'
+      uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc  # v1.12.4

.github/workflows/test.yaml

@@ -1,18 +1,7 @@
-
 name: test
 
 on: [push, pull_request]
 
-env:
-  PIXI_VERSION: v0.47.0
-
-# # Gave up -- could not figure out how to use environment variables :-(
-# env:
-#   # I got these from: https://github.com/prefix-dev/setup-pixi/blob/main/README.md
-#   # they seem to keep it pretty up to date
-#   SETUP_PIXI_VERSION: v0.8.1
-#   PIXI_VERSION: v0.29.0
-
 jobs:
   test:
     runs-on: ${{ matrix.os }}
@@ -21,28 +10,22 @@ jobs:
       matrix:
         os: ["ubuntu-latest", "windows-latest", "macos-latest"]
         environment: [test310, test311, test312, test313]
+    
     steps:
-      - uses: actions/checkout@v4
-      - uses: prefix-dev/[email protected]
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      - name: Setup pixi
+        uses: prefix-dev/setup-pixi@19eac09b398e3d0c747adc7921926a6d802df4da  # v0.8.8
         with:
-          pixi-version: latest
           cache: true
-          # auth-host: prefix.dev
-          # auth-token: ${{ secrets.PREFIX_DEV_TOKEN }}
-      - run: pixi run --environment ${{ matrix.environment }} test
-  lint:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-    steps:
-      - uses: actions/checkout@v4
-      - uses: prefix-dev/[email protected]
-        with:
-          pixi-version: latest
-          cache: true
-          # auth-host: prefix.dev
-          # auth-token: ${{ secrets.PREFIX_DEV_TOKEN }}
-      - run: pixi run --environment test310 lint
+
+      - name: Tests
+        run: >
+          pixi run --environment ${{ matrix.environment }} test
+        
+      - name: Lint
+        if: contains(${{ matrix.os }}, "ubuntu") && ${{ matrix.environment }} == "test310"
+        run: >
+          pixi run --environment test310 lint