ci: bump sigstore-python action to fix deprecation #71

	name: Publish Python distribution to PyPI and TestPyPI

	on: pull_request

	jobs:
	build:
	name: Build distribution
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: "3.x"
	- name: Install pypa/build
	run: python3 -m pip install build --user
	- name: Build a binary wheel and a source tarball
	run: python3 -m build
	- name: Store the distribution packages
	uses: actions/upload-artifact@v4
	with:
	name: python-package-distributions
	path: dist/

	github-release:
	name: Sign the Python distribution with Sigstore and upload them to GitHub Release
	runs-on: ubuntu-latest

	permissions:
	contents: write # IMPORTANT: mandatory for making GitHub Releases
	id-token: write # IMPORTANT: mandatory for sigstore

	steps:
	- name: Download all the dists
	uses: actions/download-artifact@v4
	with:
	name: python-package-distributions
	path: dist/
	- name: Sign the dists with Sigstore
	uses: sigstore/gh-action-sigstore-python@v3.0.1
	with:
	inputs: >-
	./dist/*.tar.gz
	./dist/*.whl
	- name: Create GitHub Release
	env:
	GITHUB_TOKEN: ${{ github.token }}
	run: gh release create 'v0.1.4' --repo '${{ github.repository }}' --notes ""
	- name: Upload artifact signatures to GitHub Release
	env:
	GITHUB_TOKEN: ${{ github.token }}
	# Upload to GitHub Release using the `gh` CLI.
	# `dist/` contains the built packages, and the
	# sigstore-produced signatures and certificates.
	run: gh release upload 'v0.1.4' dist/** --repo '${{ github.repository }}'

Provide feedback