release: bump version to 4.0.0rc3 (#162) #14

	name: Release

	# Triggered by pushing a v* tag (e.g. `git tag v3.1.0rc1 && git push origin v3.1.0rc1`)
	# or manually via the Actions tab. Publishes to TestPyPI first, then PyPI on success.
	on:
	push:
	tags:
	- 'v*'
	workflow_dispatch:

	jobs:
	build:
	name: Build distribution
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6
	- name: Install uv
	uses: astral-sh/setup-uv@v8.1.0
	with:
	python-version: '3.12'
	- name: Install dev deps
	run: uv sync --extra dev
	- name: Smoke test
	run: uv run pytest -q
	- name: Build sdist + wheel
	run: uv build
	- name: Upload distributions
	uses: actions/upload-artifact@v7
	with:
	name: dist
	path: dist/

	publish-testpypi:
	name: Publish to TestPyPI
	needs: build
	runs-on: ubuntu-latest
	environment: testpypi
	permissions:
	id-token: write
	steps:
	- name: Download distributions
	uses: actions/download-artifact@v8
	with:
	name: dist
	path: dist/
	- name: Publish to TestPyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	repository-url: https://test.pypi.org/legacy/
	# TestPyPI is a smoke test; if a workflow_dispatch already uploaded
	# this version, don't fail the tag-driven run on the duplicate.
	skip-existing: true

	publish-pypi:
	name: Publish to PyPI
	needs: publish-testpypi
	runs-on: ubuntu-latest
	environment: pypi
	permissions:
	id-token: write
	steps:
	- name: Download distributions
	uses: actions/download-artifact@v8
	with:
	name: dist
	path: dist/
	- name: Publish to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback