pin version #5

	name: Upload Python Package

	on:
	push:
	branches:
	- 'pypi'

	permissions:
	contents: read

	jobs:
	release-build:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4 # Ensure actions are pinned properly

	- uses: actions/setup-python@v5
	with:
	python-version: "3.x"

	- name: Build release distributions
	run: \|
	python -m pip install build
	python -m build

	- name: Upload distributions
	uses: actions/upload-artifact@v4
	with:
	name: release-dists
	path: dist/

	publish:
	runs-on: ubuntu-latest

	needs:
	- release-build

	permissions:
	id-token: write
	contents: read # Added this permission

	environment:
	name: pypi
	url: https://pypi.org/p/cartiflette

	steps:
	- name: Retrieve release distributions
	uses: actions/download-artifact@v4
	with:
	name: release-dists
	path: dist/

	- name: Publish release distributions to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	user: ${{ secrets.PYPI_USERNAME }}
	password: ${{ secrets.PYPI_PASSWORD }} # Ensure the secret name is correct

Provide feedback