Add a PyPI-publishing job.

Author: erikrose

.github/workflows/publish.yml

@@ -0,0 +1,30 @@
+# This needs to be merged into a single workflow, called publish.yml, with the
+# wheel-building stuff, so it can share artifacts. I'm assuming the
+# wheel-building stuff lives in a job called "make-dists". If not, change the
+# below reference.
+
+name: Publish to PyPI
+
+on: [push]
+
+jobs:
+  publish:
+    name: Publish any pushed version tag to PyPI
+    # Publish to PyPI only on pushes of tags like "v1.2.3".
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    needs:
+    - make-dists
+    runs-on: ubuntu-24.04
+    environment:
+      name: pypi
+      url: https://pypi.org/p/fastly-compute
+    permissions:
+      id-token: write
+    steps:
+    - name: Download all the dists
+      uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53  # @v6
+      with:
+        name: python-package-distributions
+        path: dist/
+    - name: Publish dists to PyPI
+      uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # @release/v1