Fix mypy and ensure it runs on GH Actions #397

	name: CI

	on:
	push:
	pull_request:
	branches: [main]

	jobs:
	test:
	name: Run tests on ${{ matrix.python }}
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python: ["3.8", "3.9", "3.10", "3.11", "3.12"]

	steps:
	- uses: actions/checkout@v3

	- uses: actions/setup-python@v4
	with:
	python-version: ${{ matrix.python }}

	- uses: actions/cache@v3
	with:
	path: ~/.cache/pip
	key: ${{ hashFiles('setup.cfg') }}-${{ hashFiles('requirements-test.txt') }}

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install tox-gh-actions

	- run: tox
	env:
	COVERAGE_FORMAT: xml

	- uses: codecov/codecov-action@v3
	if: ${{ !cancelled() && hashFiles('coverage.xml') }}
	with:
	token: ${{ secrets.CODECOV_TOKEN }}

	publish:
	runs-on: ubuntu-latest
	needs: test

	# See https://docs.pypi.org/trusted-publishers/using-a-publisher/
	environment: release
	permissions:
	id-token: write

	# Only Publish if it's a tagged commit
	if: >-
	startsWith(github.ref, 'refs/tags/')
	&& github.event_name == 'push'

	steps:
	- uses: actions/checkout@v3

	- name: Set up Python 3.8
	uses: actions/setup-python@v4
	with:
	python-version: 3.8

	- name: Install pypa/build
	run: >-
	python -m
	pip install
	build
	--user

	- name: Build a binary wheel and a source tarball
	run: >-
	python -m
	build
	--sdist
	--wheel
	--outdir dist/
	.

	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback