Merge pull request #401 from ssec/dependabot/github_actions/actions/d…

…ownload-artifact-4

Bump actions/download-artifact from 3 to 4

.github/workflows/deploy.yaml

@@ -24,9 +24,9 @@ jobs:
 
       - name: Create sdist
         shell: bash -l {0}
-        run: python setup.py sdist
+        run: python3 -m pip install build; python -m build
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: dist
           path: dist/*.tar.gz
@@ -95,14 +95,14 @@ jobs:
   upload-sdist:
     runs-on: ubuntu-latest
     needs: [sdist, bundle]  # don't deploy unless sdist and bundle building succeeded
-    # publish when a GitHub Release is created
-    if: github.event_name == 'release' && github.event.action == 'published'
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: dist
           path: dist
       - uses: pypa/gh-action-pypi-publish@master
+        # publish when a GitHub Release is created
+        if: github.event_name == 'release' && github.event.action == 'published'
         with:
           user: __token__
           password: ${{ secrets.UWSIFT_PYPI_TOKEN }}