Add Maturin PyPI release CI (#71)

Author: kralka

.github/workflows/maturin_ci.yml

@@ -1,9 +1,10 @@
-# This file is autogenerated by maturin v1.7.1
+# This file is autogenerated by maturin v1.7.4
 # To update, run
 #
-#    maturin generate-ci github --pytest --platform all
+#    maturin generate-ci github --pytest --platform linux
 #
 name: Maturin CI
+
 on:
   push:
     paths:
@@ -27,6 +28,8 @@ jobs:
             target: x86_64
           - runner: ubuntu-latest
             target: x86
+          - runner: ubuntu-latest
+            target: aarch64
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
@@ -52,7 +55,7 @@ jobs:
           python3 -m venv .venv
           source .venv/bin/activate
           pip install sedpack --find-links dist --force-reinstall
-          pip3 install --require-hashes --no-deps -r requirements.txt # TODO workaround
+          pip install --require-hashes --no-deps -r requirements.txt # TODO workaround
           pip install pytest
           pytest
       - name: pytest
@@ -68,8 +71,8 @@ jobs:
             pip3 install -U pip pytest
           run: |
             set -e
-            pip3 install sedpack --find-links dist --force-reinstall
             pip3 install --require-hashes --no-deps -r requirements.txt # TODO workaround
+            pip3 install sedpack --find-links dist --force-reinstall
             pytest
 
   sdist:
@@ -86,3 +89,30 @@ jobs:
         with:
           name: wheels-sdist
           path: dist
+
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
+    needs: [linux, sdist]
+    permissions:
+      # Use to sign the release artifacts
+      id-token: write
+      # Used to upload release artifacts
+      contents: write
+      # Used to generate artifact attestation
+      attestations: write
+    steps:
+      - uses: actions/download-artifact@v4
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: 'wheels-*/*'
+      - name: Publish to PyPI
+        if: "startsWith(github.ref, 'refs/tags/')"
+        uses: PyO3/maturin-action@v1
+        env:
+          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+        with:
+          command: upload
+          args: --non-interactive --skip-existing wheels-*/*