CD #4

	name: CD

	on:
	release:
	types: [published]
	workflow_dispatch:
	schedule:
	- cron: "0 3 * * 1"

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

	- name: Setup Python
	uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
	with:
	python-version: "3.12"

	- name: Build
	run: \|
	python -m pip install build
	python -m build .

	- name: Store the distribution packages
	uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
	with:
	name: python-package-distributions
	path: dist/
	if-no-files-found: error

	publish:
	name: Publish to PyPI
	needs: [build]
	runs-on: ubuntu-latest
	if: github.event_name == 'release' && github.event.action == 'published'
	environment:
	name: pypi
	url: https://pypi.org/p/pyodide-build
	permissions:
	id-token: write # IMPORTANT: mandatory for trusted publishing
	attestations: write
	contents: read
	steps:
	- name: Download all the dists
	uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
	with:
	path: dist/
	merge-multiple: true

	- name: Generate artifact attestations
	uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3
	with:
	subject-path: "dist/*"

	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@897895f1e160c830e369f9779632ebc134688e1b # v1.10.2

Provide feedback