move to single workflow cicd

Author: ric-evans

.github/workflows/ci.yml renamed to .github/workflows/cicd.yml

@@ -1,4 +1,4 @@
-name: CI
+name: CI/CD
 
 on:
   push:
@@ -130,7 +130,7 @@ jobs:
   # TAG NEW VERSION
   ############################################################################
 
-  tag-new-version:
+  tag-and-release:
     # only run on main/master/default
     if: format('refs/heads/{0}', github.event.repository.default_branch) == github.ref
     needs: [
@@ -146,9 +146,12 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0  # required to see tags and commits
-          token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}  # so a 'git push' can trigger workflows
           ref: ${{ github.sha }}  # lock to triggered commit ('github.ref' is dynamic)
 
+      - uses: actions/setup-python@v5  # needed for building project
+        with:
+          python-version: "${{ fromJSON(needs.py-versions.outputs.matrix)[0] }}"
+
       - uses: WIPACrepo/[email protected]
         id: next-version
         with:
@@ -159,10 +162,27 @@ jobs:
             dependencies-logs/**
             resources/foo/**
 
-      - name: Tag New Version
-        if: steps.next-version.outputs.version != ''
+      - if: steps.next-version.outputs.version != ''
+        name: Tag New Version
         run: |
           set -euo pipefail
           echo "now: $(date -u +"%Y-%m-%dT%H:%M:%S.%3N")"
           git tag v${{ steps.next-version.outputs.version }}  # note: prepend 'v'
           git push origin --tags
+
+      - if: steps.next-version.outputs.version != ''
+        uses: WIPACrepo/[email protected]  # creates dist/
+
+      - if: steps.next-version.outputs.version != ''
+        uses: softprops/action-gh-release@v2
+        with:
+          files: dist/*
+          generate_release_notes: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - if: steps.next-version.outputs.version != ''
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          user: __token__
+          password: ${{ secrets.PYPI_TOKEN }}