Build package separately before testing

Author: kytta

.github/workflows/release.yml

@@ -9,30 +9,33 @@ permissions: {}
 
 jobs:
   build:
-    if: github.repository == 'jazzband/django-simple-menu'
+    name: Build and verify package
     runs-on: ubuntu-latest
+    permissions:
+      attestations: write
+      id-token: write
 
     steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          persist-credentials: false
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+        persist-credentials: false
 
-      - name: Set up Python
-        uses: actions/setup-python@v5
+    - uses: hynek/build-and-inspect-python-package@v2
+      with:
+        attest-build-provenance-github: 'true'
+
+  release:
+    if: github.repository == 'jazzband/django-simple-menu'
+    runs-on: ubuntu-latest
+    needs: build
+
+    steps:
+      - name: Download pre-built packages
+        uses: actions/download-artifact@v4
         with:
-          python-version: 3.11
-
-      - name: Install dependencies
-        run: |
-          python -m pip install -U pip
-          python -m pip install -U build setuptools setuptools-scm twine
-
-      - name: Build package
-        run: |
-          python -m setuptools_scm
-          python -m build
-          twine check --strict dist/*
+          name: Packages
+          path: dist
 
       - name: Upload packages to Jazzband
         if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')

.github/workflows/test.yml

@@ -14,12 +14,26 @@ permissions: {}
 
 jobs:
   build:
-    name: build (Python ${{ matrix.python-version }}, Django ${{ matrix.django-version }})
+    name: Build and verify package
     runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+        persist-credentials: false
+
+    - uses: hynek/build-and-inspect-python-package@v2
+
+  test:
+    name: Test (Python ${{ matrix.python-version }}, Django ${{ matrix.django-version }})
+    runs-on: ubuntu-latest
+    needs: build
+
     strategy:
       fail-fast: false
       matrix:
-        # https://docs.djangoproject.com/faq/install/#what-python-version-can-i-use-with-django
+        # https://docs.djangoproject.com/en/5.2/faq/install/#faq-python-version-support
         include:
           - django-version: '3.2'
             python-version: '3.8'
@@ -72,7 +86,7 @@ jobs:
 
     - name: Tox tests
       run: |
-        tox -v
+        tox -v --installpkg dist/*.whl
       env:
         DJANGO: ${{ matrix.django-version }}