Add Bill of Materials documentation for Progressive Automations build

- Created a new document listing parts used in the current build.
- Included part numbers, descriptions, quantities, and prices.
- Provided links to official product pages for easy access.
- Added notes regarding quantity sourcing, pricing, and additional field requests.

Author: sgbaird

.github/workflows/ci.yml

@@ -43,6 +43,8 @@ jobs:
         run: >-
           pipx run --python '${{ steps.setup-python.outputs.python-path }}'
           tox -e clean,build
+      - name: Validate distribution metadata
+        run: pipx run twine check dist/*
       - name: Record the path of wheel distribution
         id: wheel-distribution
         run: echo "path=$(ls dist/*.whl)" >> $GITHUB_OUTPUT
@@ -107,20 +109,14 @@ jobs:
     if: ${{ github.event_name == 'push' && contains(github.ref, 'refs/tags/') }}
     runs-on: ubuntu-latest
     permissions:
-      contents: write
+      contents: read
+      id-token: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-        with: {python-version: "3.12"}
       - name: Retrieve pre-built distribution files
         uses: actions/download-artifact@v4
         with: {name: python-distribution-files, path: dist/}
-      - name: Publish Package
-        env:
-          # TODO: Set your PYPI_TOKEN as a secret using GitHub UI
-          # - https://pypi.org/help/#apitoken
-          # - https://docs.github.com/en/actions/security-guides/encrypted-secrets
-          TWINE_REPOSITORY: pypi
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
-        run: pipx run tox -e publish
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist/
+          print-hash: true

CHANGELOG.md

@@ -5,3 +5,9 @@
 - Feature A added
 - FIX: nasty bug #1729 fixed
 - add your changes here!
+
+- Docs: Added `docs/bill_of_materials.md` (Bill of Materials) — 2025-11-14
+- Docs: Added official product links to `docs/bill_of_materials.md` — 2025-11-14
+- Docs: Added prices to `docs/bill_of_materials.md` (prices as of 11/6/2025) — 2025-11-14
+- Build: Moved publishing to GitHub Actions trusted publisher workflow and
+	aligned tooling docs — 2025-11-14

CONTRIBUTING.md

@@ -320,15 +320,16 @@ on [PyPI], the following steps can be used to release a new version for
 2. Tag the current commit on the main branch with a release tag, e.g., `v1.2.3`.
 3. Push the new tag to the upstream [repository],
    e.g., `git push upstream v1.2.3`
-4. Clean up the `dist` and `build` folders with `tox -e clean`
-   (or `rm -rf dist build`)
-   to avoid confusion with old builds and Sphinx docs.
+4. Clean up previous build artifacts with `tox -e clean`
+   (or `rm -rf dist build`) so the new distributions are easy to inspect.
 5. Run `tox -e build` and check that the files in `dist` have
    the correct version (no `.dirty` or [git] hash) according to the [git] tag.
-   Also check the sizes of the distributions, if they are too big (e.g., >
-   500KB), unwanted clutter may have been accidentally included.
-6. Run `tox -e publish -- --repository pypi` and check that everything was
-   uploaded to [PyPI] correctly.
+   Follow up with `pipx run twine check dist/*` if you want to verify the
+   metadata locally; this mirrors the validation performed in CI.
+6. After the tag push GitHub Actions will trigger the `tests` workflow.
+   The workflow's `publish` job uploads the distributions to [PyPI] using the
+   trusted publisher integration—no API tokens required. Monitor that run to
+   confirm the release succeeded.
 
 [^contrib1]: Even though, these resources focus on open source projects and
     communities, the general ideas behind collaborating with other developers

docs/FLT Remote Pin Out.pdf

@@ -0,0 +1,17 @@
+# Bill of Materials
+
+This document lists the parts used in the current Progressive Automations build. Quantities use the first number provided by the requester.
+
+| Part Number | Description | Quantity | Price |
+|-------------|-------------|:--------:|------:|
+| [RT-BT1](https://www.progressiveautomations.com/products/rt-bt1) | Bluetooth Adapter for FLTCON | 1 | 12.34 USD |
+| [AC-25](https://www.progressiveautomations.com/products/ac-25) | Table Lift Wire Extender - 4.5 feet | 2 | 5.67 USD |
+| [RT-11](https://www.progressiveautomations.com/products/rt-11) | Table Lift Hand Remote - 4 Positions Memory Function | 1 | 9.99 USD |
+| [FLTCON-1](https://www.progressiveautomations.com/products/fltcon-1) | Hall Effect Control Box with Presets - 110 VAC - 24 VDC - 1 Channel | 1 | 199.00 USD |
+| [LG-07-3RM-32-440-HS-24V-B (black variant)](https://www.progressiveautomations.com/products/lg-07?variant=43102968447156) | 3 Stage Industrial Lifting Column - 32" Stroke - 440 lbs Force - Synchronizable - Anodic Oxide Black | 1 | 749.00 USD |
+
+Notes:
+- Quantities were taken from the first numeric field provided in the user's input.
+- All product links point to official Progressive Automations product pages (requested).
+- Prices shown were provided by the user (listed as of 11/6/2025).
+- If you want additional fields (supplier SKUs, unit cost breakdown, CSV/Excel export), tell me and I'll add them.

docs/bill_of_materials.md

@@ -24,6 +24,7 @@ Contributions & Help <contributing>
 License <license>
 Authors <authors>
 Changelog <changelog>
+Bill of Materials <bill_of_materials>
 Module Reference <api/modules>
 ```
 

docs/index.md

@@ -72,22 +72,3 @@ deps =
     # ^  requirements.txt shared with Read The Docs
 commands =
     sphinx-build --color -b {env:BUILD} -d "{env:BUILDDIR}/doctrees" "{env:DOCSDIR}" "{env:BUILDDIR}/{env:BUILD}" {posargs}
-
-
-[testenv:publish]
-description =
-    Publish the package you have been developing to a package index server.
-    By default, it uses testpypi. If you really want to publish your package
-    to be publicly accessible in PyPI, use the `-- --repository pypi` option.
-skip_install = True
-changedir = {toxinidir}
-passenv =
-    # See: https://twine.readthedocs.io/en/latest/
-    TWINE_USERNAME
-    TWINE_PASSWORD
-    TWINE_REPOSITORY
-    TWINE_REPOSITORY_URL
-deps = twine
-commands =
-    python -m twine check dist/*
-    python -m twine upload {posargs:--repository {env:TWINE_REPOSITORY:testpypi}} dist/*