Move the build job out of the publish job into the ci-release job.

This way the build job is run before the publish job.

Author: glenn20

.github/workflows/ci-release.yaml

@@ -13,8 +13,13 @@ jobs:
       os: '["ubuntu-latest", "windows-latest", "macos-latest"]'
       python-version: '["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]'
 
+  build:
+    name: Build
+    uses: glenn20/python-ci/.github/workflows/build.yaml@main
+
   publish-test:
     name: Publish to test.pypi
+    needs: build
     uses: ./.github/workflows/publish.yaml
     with:
       pypi: test.pypi
@@ -23,6 +28,7 @@ jobs:
 
   publish-pypi:
     name: Publish to pypi
+    needs: build
     uses: ./.github/workflows/publish.yaml
     with:
       pypi: pypi

.github/workflows/ci-tests.yaml

@@ -20,9 +20,13 @@ jobs:
       os: '["ubuntu-latest"]'
       python-version: '["3.9", "3.13"]'
 
+  build:
+    name: Build
+    uses: glenn20/python-ci/.github/workflows/build.yaml@main
+
   publish-test:
     name: Publish to test.pypi
-    needs: tests
+    needs: build
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     uses: ./.github/workflows/publish.yaml
     with:

.github/workflows/publish.yaml

@@ -34,15 +34,8 @@ on:
         type: string
 
 jobs:
-  build:
-    name: Build
-    uses: glenn20/python-ci/.github/workflows/build.yaml@main
-    permissions:
-      id-token: none
-
   publish:
     name: Publish to ${{ inputs.pypi }}
-    needs: build
     runs-on: ubuntu-latest
     environment:
       name: publish-${{ inputs.pypi }}