From da8c7aa4e057b95a46e1f9c8bedc53872db4dfd4 Mon Sep 17 00:00:00 2001
From: Steven Silvester <steven.silvester@ieee.org>
Date: Mon, 6 Jan 2025 14:25:36 -0600
Subject: [PATCH] PYTHON-5017 Use a separate PyPI publish step (#2042)

---
 .github/workflows/release-python.yml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml
index cee222d10..78f7ba1fa 100644
--- a/.github/workflows/release-python.yml
+++ b/.github/workflows/release-python.yml
@@ -67,6 +67,23 @@ jobs:
 
   publish:
     needs: [build-dist, static-scan]
+    name: Upload release to PyPI
+    runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
+    steps:
+      - name: Download all the dists
+        uses: actions/download-artifact@v4
+        with:
+          name: all-dist-${{ github.run_id }}
+          path: dist/
+      - name: Publish package distributions to PyPI
+        if: startsWith(inputs.dry_run, 'false')
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+  post-publish:
+    needs: [publish]
     runs-on: ubuntu-latest
     environment: release
     permissions: