Merge pull request #48 from arska/renovate/pypi-certifi-vulnerability #227

	name: Python package

	on:
	- push
	- pull_request

	jobs:
	test:
	runs-on: ubuntu-latest
	name: "run tox"
	strategy:
	matrix:
	python-version: [3.8, 3.9, "3.10", 3.11]

	steps:
	- uses: actions/checkout@v4
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v4
	with:
	python-version: ${{ matrix.python-version }}
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install tox tox-gh-actions
	- name: Test with tox
	env:
	CODECOV_TOKEN: "889b90e8-e5a8-4139-aef6-87e6f2e1a0a4"
	run: tox

	package:
	name: "Build & verify package"
	runs-on: "ubuntu-latest"
	needs: [test]
	steps:
	- uses: "actions/checkout@v4"
	- uses: "actions/setup-python@v4"
	with:
	python-version: "3.9"

	- name: "Install pep517 and twine"
	run: "python -m pip install pep517 twine"
	- name: "Build package"
	run: "python -m pep517.build --source --binary ."
	- name: "List result"
	run: "ls -l dist"
	- name: "Check long_description"
	run: "python -m twine check dist/*"
	- name: Publish package
	if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	user: __token__
	password: ${{ secrets.PYPI_API_TOKEN }}

Provide feedback