ci: split deploy workflow up into three dependent stages

Author: radhermit

.github/workflows/deploy.yml

@@ -6,7 +6,36 @@ on:
     tags: [v*]
 
 jobs:
-  deploy:
+  build-sdist:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v3
+      with:
+        # checkout full history for setuptools-scm
+        fetch-depth: 0
+        submodules: recursive
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: '3.10'
+
+    - name: Build sdist
+      run: |
+        pip install tox
+        tox -e sdist
+
+    - name: Upload sdist artifact
+      uses: actions/upload-artifact@v3
+      with:
+        name: sdist
+        path: dist/*.tar.gz
+        if-no-files-found: error
+        retention-days: 3
+
+  build-wheels:
+    needs: ["build-sdist"]
     strategy:
       matrix:
         include:
@@ -47,6 +76,12 @@ jobs:
         path: ${{ github.event.repository.name }}
         submodules: recursive
 
+    - name: Download sdist artifact
+      uses: actions/download-artifact@v3
+      with:
+        name: sdist
+        path: pkgcraft-python/dist
+
     - name: Set up Python
       uses: actions/setup-python@v4
       with:
@@ -58,36 +93,46 @@ jobs:
       with:
         platforms: ${{ matrix.arch }}
 
-    - name: Build sdist and wheels
+    - name: Build wheels
       run: ./build-wheels ${{ matrix.arch }}
 
+    - name: Verify wheels
+      run: |
+        pip install twine
+        twine check pkgcraft-python/wheels/*
+
     - name: Upload build artifacts
       uses: actions/upload-artifact@v3
       with:
-        name: pkgcraft-python
-        path: |
-          pkgcraft-python/dist/
-          pkgcraft-python/wheels/
+        name: wheels
+        path: pkgcraft-python/wheels/
         if-no-files-found: error
-        retention-days: 1
+        retention-days: 3
+
+  publish:
+    if: startsWith(github.ref, 'refs/tags/')
+    needs: ["build-sdist", "build-wheels"]
+    runs-on: ubuntu-latest
+    steps:
+    - name: Download sdist and wheel artifacts
+      uses: actions/download-artifact@v3
 
     - name: Upload sdist to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
-      if: ${{ runner.os == 'Linux' && matrix.arch == 'x86_64' && startsWith(github.ref, 'refs/tags/') }}
       with:
         password: ${{ secrets.PYPI_API_TOKEN }}
-        packages_dir: pkgcraft-python/dist/
+        packages_dir: sdist/
+        print_hash: true
 
     - name: Upload wheels to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
-      if: startsWith(github.ref, 'refs/tags/')
       with:
         password: ${{ secrets.PYPI_API_TOKEN }}
-        packages_dir: pkgcraft-python/wheels/
+        packages_dir: wheels/
+        print_hash: true
 
     - name: Create GitHub release
       uses: softprops/action-gh-release@v1
-      if: ${{ runner.os == 'Linux' && matrix.arch == 'x86_64' && startsWith(github.ref, 'refs/tags/') }}
       with:
-        files: pkgcraft-python/dist/*.tar.gz
+        files: sdist/*.tar.gz
         fail_on_unmatched_files: true