Update poetry to 2.2.1 in GitHub Actions (#10)

Author: fbjorn

.github/workflows/publish.yaml

@@ -6,8 +6,8 @@ on:
       - "*"
 
 jobs:
-  build_and_upload:
-    name: Build and upload
+  build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
       - name: Checkout 🔁
@@ -16,21 +16,40 @@ jobs:
       - name: Set up Python 🐍
         uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
         with:
-          python-version: "3.10"
+          python-version: "3.13"
 
       - name: Install Poetry and pre-commit ⚙️
-        run: pip install poetry==1.8.5 pre-commit
+        run: pip install poetry==2.2.1 pre-commit
 
       - name: Install dependencies 🛠
         run: poetry install
 
       - name: Run tests 🚦
         run: poetry run invoke test
 
+      - name: Build the package 📦
+        run: poetry build
+
+      - name: Publish build artifact ⬆️
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 #v5.0.0
+        with:
+          name: package-dist
+          path: dist
+  publish:
+    name: Publish
+    needs: build
+    runs-on: ubuntu-latest
+    environment: PyPI
+    permissions:
+      # this permission is mandatory for trusted publishing
+      id-token: write
+    steps:
+      - name: Download build artifact ⬇️
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 #v6.0.0
+        with:
+          name: package-dist
+          path: dist
+
       - name: Publish package to PyPI 🙌
-        run: |
-          set -e
-          poetry config http-basic.pypi "__token__" "${PYPI_TOKEN}"
-          poetry publish --build
-        env:
-          PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
+        if: success() && github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e #v1.13.0

.github/workflows/tests.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
     steps:
       - name: Checkout 🔁
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -21,7 +21,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Poetry and pre-commit ⚙️
-        run: pip install poetry==1.8.5 pre-commit
+        run: pip install poetry==2.2.1 pre-commit
 
       - name: Install dependencies 🛠
         run: poetry install