V0.13.4 Fix vulnerabilities (#137) #74

	# This is a basic workflow to help you get started with Actions

	name: Publish Python 🐍 distributions 📦 to PyPI and TestPyPI

	# Controls when the workflow will run
	on:
	# Triggers the workflow on push or pull request events but only for the master branch
	push:
	branches: [ master ]
	tags:
	- "v*"

	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	# A workflow run is made up of one or more jobs that can run sequentially or in parallel
	jobs:
	# This workflow contains a single job called "build"
	build:
	# The type of runner that the job will run on
	runs-on: ubuntu-latest

	# Steps represent a sequence of tasks that will be executed as part of the job
	steps:
	- uses: actions/checkout@master
	- name: Set up Python 3.7
	uses: actions/setup-python@v1
	with:
	python-version: 3.7
	- name: Install pypa/build
	run: >-
	python -m
	pip install
	build
	--user
	- name: Build a binary wheel and a source tarball
	run: >-
	python -m
	build
	--sdist
	--wheel
	--outdir dist/
	.
	- name: Publish distribution 📦 to Test PyPI
	#if: startsWith(github.ref, 'refs/tags')
	uses: pypa/gh-action-pypi-publish@master
	with:
	password: ${{ secrets.TEST_PYPI_API_TOKEN }}
	repository_url: https://test.pypi.org/legacy/
	- name: Publish distribution 📦 to PyPI
	#if: startsWith(github.ref, 'refs/tags')
	uses: pypa/gh-action-pypi-publish@master
	with:
	password: ${{ secrets.PYPI_API_TOKEN }}

Provide feedback