Merge pull request #508 from nyx-space/release-python-0.6.8

Publish the wheels packages

Author: ChristopherRabotin

.github/workflows/python.yml

@@ -274,26 +274,32 @@ jobs:
         with:
           name: wheels-sdist
           path: anise-py/dist
-
-      - name: Install uv # Check that we can install uv in normal pipelines
-        run: | 
-          curl -LsSf https://astral.sh/uv/install.sh | sh
-
   release:
     name: Release
     runs-on: ubuntu-latest
-    if: github.ref_type == 'tag'
     needs: [linux, windows, macos-13, macos-14, macos-15, sdist]
+    permissions:
+      # Use to sign the release artifacts
+      id-token: write
+      # Used to upload release artifacts
+      contents: write
+      # Used to generate artifact attestation
+      attestations: write
     steps:
+      - uses: actions/download-artifact@v4
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: 'wheels-*/*'
+      - name: Publish to PyPI
+        if: github.ref_type == 'tag'
+        uses: PyO3/maturin-action@v1
+        env:
+          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+        with:
+          command: upload
+          args: --non-interactive --skip-existing wheels-*/*
       - uses: actions/download-artifact@v4 # No `name` to download all artifacts.
         with:
             pattern: wheels-*
             merge-multiple: true
-
-      - name: Publish to PyPI
-        env:
-          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-        run: |
-          # Install uv
-          curl -LsSf https://astral.sh/uv/install.sh | sh
-          uv publish