Forgot write permission for token in workflow #20

	name: Test & Publish

	on: [push, pull_request]

	permissions:
	contents: read

	jobs:
	test:
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	matrix:
	python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "pypy-3.10"]

	steps:
	- uses: actions/checkout@v4

	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}

	- name: Update pip
	run: python -m pip install --upgrade pip
	- name: Build and install python-x3dh
	run: pip install .
	- name: Install test dependencies
	run: pip install --upgrade pytest pytest-asyncio pytest-cov mypy pylint flake8 setuptools

	- name: Type-check using mypy
	run: mypy --strict x3dh/ setup.py tests/
	- name: Lint using pylint
	run: pylint x3dh/ setup.py tests/
	- name: Format-check using Flake8
	run: flake8 x3dh/ setup.py tests/
	- name: Test using pytest
	run: pytest --cov=x3dh --cov-report term-missing:skip-covered

	build:
	name: Build source distribution and wheel
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Build source distribution and wheel
	run: python3 setup.py sdist bdist_wheel

	- uses: actions/upload-artifact@v4
	with:
	name: sdist
	path: \|
	dist/*.tar.gz
	dist/*.whl

	publish:
	needs: [test, build]
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')

	steps:
	- uses: actions/download-artifact@v4
	with:
	path: dist
	merge-multiple: true

	- name: Publish package distributions to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback