use artifacts

Author: ric-evans

.github/workflows/cicd.yml

@@ -140,6 +140,7 @@ jobs:
           fetch-depth: 0  # required to see tags and commits
           ref: ${{ github.sha }}  # in case 'ref' (arg default) has been updated since start
           token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}  # so a new tag can trigger workflows
+
       - uses: actions/setup-python@v5
         with:
           python-version: "${{ fromJSON(needs.py-versions.outputs.matrix)[0] }}"

.github/workflows/release.yml

@@ -16,30 +16,54 @@ jobs:
       - id: versions
         uses: WIPACrepo/wipac-dev-py-versions-action@v2.5
 
-  release:
-    if: github.ref_type == 'tag'  # redundant b/c workflow's 'on'
+  py-build:
     needs: [ py-versions ]
     runs-on: ubuntu-latest
-    concurrency: release  # prevent any possible race conditions
     steps:
       - uses: actions/checkout@v4
         with:
-          fetch-depth: 0  # required to see tags and commits
-          ref: ${{ github.sha }}  # in case 'ref' (arg default) has been updated since start
+          fetch-depth: 0
+          ref: ${{ github.sha }}
+
       - uses: actions/setup-python@v5
         with:
           python-version: "${{ fromJSON(needs.py-versions.outputs.matrix)[0] }}"
 
       - uses: WIPACrepo/wipac-dev-py-build-action@main
 
+      - name: Upload dist/ artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  github-release:
+    needs: [ py-build ]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download dist/ artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
       - uses: softprops/action-gh-release@v2
-        # uses 'github.ref_name' as associated tag
         with:
           files: dist/*
           generate_release_notes: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+  pypi-publish:
+    needs: [ py-build ]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download dist/ artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
       - uses: pypa/gh-action-pypi-publish@release/v1
         with:
           user: __token__