Merge pull request #1095 from bids-standard/dependabot/submodules/bid… #373

	name: Packaging

	on:
	push:
	branches:
	- master
	- maint/*
	- rel/*
	tags:
	- '*'

	defaults:
	run:
	shell: bash

	jobs:
	package:
	# Build packages and upload
	runs-on: ${{ matrix.os }}
	permissions:
	# IMPORTANT: this permission is mandatory for trusted publishing
	id-token: write
	strategy:
	matrix:
	include:
	- os: ubuntu-latest
	python-version: "3.10"
	steps:
	- uses: actions/checkout@v4
	with:
	submodules: recursive
	fetch-depth: 0
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	- name: Display Python version
	run: python -c "import sys; print(sys.version)"
	- name: Install build
	run: python -m pip install build
	- name: Build sdist and wheel
	run: python -m build
	- name: Test PyPI upload
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	repository-url: https://test.pypi.org/legacy/
	skip-existing: true
	- name: Upload to PyPI (on tags)
	if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback