Correct build and publish workflows.

Author: freakboy3742

.github/workflows/ci.yml

@@ -25,9 +25,27 @@ jobs:
     with:
       pre-commit-source: "--group pre-commit"
 
+  package:
+    name: Build Package
+    needs: [ pre-commit ]
+    runs-on: "ubuntu-24.04"
+    permissions:
+      id-token: write
+      attestations: write
+    steps:
+    - name: Checkout
+      uses: actions/[email protected]
+      with:
+        fetch-depth: 0
+
+    - name: Build and inspect package
+      uses: hynek/[email protected]
+      with:
+        attest-build-provenance-github: 'true'
+
   unit-tests:
     name: Unit tests
-    needs: [ pre-commit ]
+    needs: [ package ]
     runs-on: "ubuntu-24.04"
     strategy:
       fail-fast: false
@@ -46,6 +64,15 @@ jobs:
         python-version: "${{ matrix.python-version }}"
         allow-prereleases: true
 
+    - name: Install test requirements
+      run: |
+        python -m pip install -U pip
+        python -m pip install --group ci
+
+    - name: Test
+      run: |
+        python -m tox -e py
+
     # # This step is only needed if you're trying to diagnose test failures that
     # # only occur in CI, and can't be reproduced locally. When it runs, it will
     # # open an SSH server (URL reported in the logs) so you can ssh into the CI

.github/workflows/release.yml

@@ -18,7 +18,6 @@ jobs:
       contents: write
       # This permission is required for trusted publishing.
       id-token: write
-      attestations: write
     steps:
       - name: Set build variables
         run: |
@@ -32,8 +31,7 @@ jobs:
       - name: Get packages
         uses: actions/[email protected]
         with:
-          pattern: wheels-*
-          merge-multiple: true
+          pattern: Packages
           path: dist
 
       - name: Create release
@@ -44,11 +42,6 @@ jobs:
           artifacts: dist/*
           artifactErrorsFailBuild: true
 
-      - name: Generate attestations
-        uses: actions/[email protected]
-        with:
-          subject-path: "dist/*"
-
       - name: Publish release to Test PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:

pyproject.toml

@@ -60,7 +60,7 @@ test = [
 ]
 ci = [
     "setuptools_scm == 9.2.0",
-    "tox == 4.29.0",
+    "tox-uv == 1.28.0",
 ]
 dev = [
     {include-group = "pre-commit"},
@@ -91,3 +91,18 @@ extend-select = [
     # use improvement.
     # "SIM",    # flake8-simplify
 ]
+
+[tool.ruff.lint.isort]
+known-first-party = [
+    "xbuild",
+    "xvenv",
+]
+known-third-party = [
+    "build",
+]
+
+[tool.check-wheel-contents]
+toplevel = [
+    "xbuild",
+    "xvenv",
+]

tests/test_xvenv.py

@@ -0,0 +1,3 @@
+def test_dummy():
+    # A placeholder test for now.
+    pass

tox.ini

@@ -1,5 +1,5 @@
 [tox]
-envlist = package,py{310,311,312,313,314}
+envlist = pre-commit,py{313,314}
 skip_missing_interpreters = true
 
 [testenv:pre-commit]
@@ -8,8 +8,8 @@ wheel_build_env = .pkg
 dependency_groups = pre-commit
 commands = pre-commit run --all-files --show-diff-on-failure --color=always
 
-[testenv:py{,39,310,311,312,313,314}]
+[testenv:py{,313,314}]
 depends = pre-commit
 dependency_groups = test
 commands =
-    python -m pytest {posargs:-vv --color yes}
+    python -m pytest tests {posargs:-vv --color yes}