From f0d9da739dbd501a87cccc7ef78992bda85457a4 Mon Sep 17 00:00:00 2001
From: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Date: Wed, 6 May 2026 11:36:26 +0300
Subject: [PATCH] Download artifacts and publish to PyPI (#122)

* Download artifacts and publish to PyPI

* Comment out enviroment

* Add comment to permissions

---------

Co-authored-by: Hynek Schlawack <hs@ox.cx>
---
 .github/workflows/wheels.yml | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index 868537c..6f60497 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -61,4 +61,27 @@ jobs:
         with:
           name: wheels-${{ matrix.os }}-${{ strategy.job-index }}
           path: ./wheelhouse/*.whl
-...
+
+  pypi-publish:
+    if: |
+      github.event.repository.fork == false
+      && github.event_name == 'push'
+      && startsWith(github.ref, 'refs/tags')
+    needs: wheels
+    runs-on: ubuntu-latest
+    name: Upload release to PyPI
+#    environment:
+#      name: release-pypi
+#      url: https://pypi.org/p/argon2-cffi-bindings
+    permissions:
+      id-token: write  # necessary for trusted publishing
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          pattern: wheels-*
+          path: dist
+          merge-multiple: true
+      - name: List files
+        run: ls -la dist/
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0