MNT: Use hash for Action workflow versions and update if needed #5

	name: Release

	on:
	pull_request:
	push:
	tags:
	- '*'

	jobs:
	build-n-publish:
	name: Build and publish Python 🐍 distributions 📦 to PyPI
	runs-on: ubuntu-latest
	if: ((github.event_name == 'push' && startsWith(github.ref, 'refs/tags')) \|\| contains(github.event.pull_request.labels.*.name, 'Build wheels'))

	steps:
	- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
	with:
	fetch-depth: 0
	- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
	with:
	python-version: 3.8

	- name: Install python-build and twine
	run: python -m pip install build "twine>=3.3"

	- name: Build package
	run: python -m build --sdist --wheel .

	- name: List result
	run: ls -l dist

	- name: Check long_description
	run: python -m twine check --strict dist/*

	- name: Test package
	run: \|
	cd ..
	python -m venv testenv
	testenv/bin/pip install pytest sphinx astropy-sphinx-theme/dist/*.whl
	testenv/bin/pytest astropy-sphinx-theme/astropy_sphinx_theme/tests

	- name: Publish distribution 📦 to PyPI
	if: startsWith(github.ref, 'refs/tags')
	uses: pypa/gh-action-pypi-publish@897895f1e160c830e369f9779632ebc134688e1b # v1.10.2
	with:
	user: __token__
	password: ${{ secrets.pypi_password }}

Provide feedback