Rework CI script

Author: drewcassidy

.github/workflows/python-package.yml

@@ -8,7 +8,7 @@ on: [ push, pull_request ]
 jobs:
   build-sdist:
     name: Build SDist
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     steps:
       - uses: actions/checkout@v4
@@ -42,15 +42,17 @@ jobs:
       - name: Upload SDist
         uses: actions/upload-artifact@v4
         with:
+          name: wheel-sdist
           path: dist/*.tar.gz
+          compression-level: 0 # already compressed
 
   build-wheels:
     name: Build Wheels on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         # macos-13 is an intel runner, macos-14 is apple silicon
-        os: [ubuntu-latest, windows-latest, macos-13, macos-14]
+        os: [ ubuntu-22.04, windows-latest, macos-13, macos-14 ]
         linux_arch: [ 'x86_64' ] #[suffix, mac, windows, linux] arch names
 
     steps:
@@ -71,7 +73,7 @@ jobs:
       - name: Install QEMU
         # install QEMU if building for linux
         uses: docker/setup-qemu-action@v2
-        if: runner.os == 'linux' 
+        if: runner.os == 'linux'
         with:
           platforms: arm64
 
@@ -83,57 +85,63 @@ jobs:
       - name: Upload Wheels
         uses: actions/upload-artifact@v4
         with:
+          name: wheels-${{ matrix.os }}
           path: ./wheelhouse/*.whl
+          compression-level: 0 # already compressed
 
-  publish:
-    name: Publish to PyPI and Github
-    needs: [ build-wheels, build-sdist ]
+  publish-pypi:
+    name: Deploy to PyPI
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
-    runs-on: ubuntu-latest
-
+    needs: [ build-wheels, build-sdist ]
+    runs-on: ubuntu-22.04
+    environment:
+      name: Publish
+      url: https://pypi.org/project/quicktex/${{ github.ref_name }}
+    permissions:
+      id-token: write
     steps:
-      - uses: actions/checkout@v4 # just need the changelog
-
-      - name: Set up Python
-        uses: actions/setup-python@v5.1.1
+      - name: Download Artifacts
+        uses: actions/download-artifact@v4
         with:
-          python-version: '3.13'
+          merge-multiple: true
+          pattern: wheel*
+          path: dist
 
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          python -m pip install yaclog
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
 
-      - name: Get version name and body
-        run: |
-          echo "VERSION_TILE=Version $(yaclog show -n)" >> $GITHUB_ENV
-          echo "$(yaclog show -mb)" >> RELEASE.md
+  publish-github:
+    name: Deploy to Github
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
+    needs: [ build-wheels, build-sdist ]
+    runs-on: ubuntu-22.04
+    environment:
+      name: Publish
+      url: https://github.com/${{ github.repository }}/releases/tag/${{ github.ref_name }}
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
 
       - name: Download Artifacts
         uses: actions/download-artifact@v4
         with:
-          name: artifact
+          merge-multiple: true
+          pattern: wheel*
           path: dist
 
       - name: List artifacts
         run: ls -l dist
 
-      - name: Publish to Test PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
-          repository_url: https://test.pypi.org/legacy/
-
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
+      - name: Get Changelog Information
+        id: yaclog-show
+        uses: drewcassidy/yaclog@1.5.0
 
       - name: Publish to Github
-        uses: softprops/action-gh-release@v1
-        with:
-          files: dist/*
-          name: ${{ env.VERSION_TITLE }}
-          body_path: RELEASE.md
+        run: >
+          gh release create ${{ github.ref_name }}
+          --notes-file "${{ steps.yaclog-show.outputs.body-file }}"
+          --title "${{ steps.yaclog-show.outputs.name }}"
+          dist/*
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ github.token }}