[sept 17 merge] review: trusted publishing tutorial (#561)

* review: trusted publishing tutorial

* Apply suggestions from code review

Co-authored-by: Michael Pilosov, PhD <[email protected]>
Co-authored-by: Jeremiah Paige <[email protected]>
Co-authored-by: Mihai Maruseac <[email protected]>
Co-authored-by: Jonny Saunders <[email protected]>

* Apply suggestions from code review

Co-authored-by: Jeremiah Paige <[email protected]>

* docs(review): updates from review

* chore(deps): Update dependabot configuration for GitHub Actions (#577)

* chore: bump the actions group (#579)

Bumps the actions group in /examples/pure-hatch/.github/workflows with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/download-artifact](https://github.com/actions/download-artifact) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish).


Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...08c6903)

Updates `actions/download-artifact` from 4.3.0 to 5.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@d3f86a1...634f93c)

Updates `pypa/gh-action-pypi-publish` from 1.12.4 to 1.13.0
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@76f52bc...ed0c539)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix: includes

* feat: literal includes for the action

* docs: fix workflow

* chore: fix errors from docs-test

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Michael Pilosov, PhD <[email protected]>
Co-authored-by: Jeremiah Paige <[email protected]>
Co-authored-by: Mihai Maruseac <[email protected]>
Co-authored-by: Jonny Saunders <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: 6 people

examples/pure-hatch/.github/workflows/release.yml

@@ -17,8 +17,15 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
-      - name: Set up Hatch
-        uses: pypa/hatch@257e27e51a6a5616ed08a39a408a21c35c9931bc
+      - name: Setup Python
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        with:
+          python-version: "3.12" # Select the version that you want to build your package on
+      - name: Upgrade pip, install Hatch, and check Hatch version
+        run: |
+          pip install --upgrade pip
+          pip install --upgrade hatch
+          hatch --version # Verify that Hatch is installed
       - name: Build artifacts
         run: hatch build
       - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2

images/trusted-publisher-pypi-github.png

@@ -468,7 +468,7 @@ The classifier key should look something like the example below. A few notes:
 - Your classifier values might be different depending upon your intended audience, development status of your package and the Python versions that you support
 - You can add as many classifiers as you wish as long as you use the [designated PyPI classifier values](https://PyPI.org/classifiers/).
 
-{emphasize-lines="26-34"}
+{emphasize-lines="26-33"}
 ```toml
 [build-system]
 requires = ["hatchling"]
@@ -514,10 +514,10 @@ Finally, add the project.urls table to your pyproject.toml file.
 `project.urls` contains links that are relevant for your project. You might want to include:
 
 - **Homepage:** A link to your published documentation for your project. If you are working through this tutorial, then you may not have this link yet. That's ok, you can skip it for the time being.
-- **Bug reports:** a link to your issues / discussions or wherever you want users to report bugs.
+- **Bug reports:** a link to your issues/discussions or wherever you want users to report bugs.
 - **Source:** the GitHub / GitLab link for your project.
 
-{emphasize-lines="36-39"}
+{emphasize-lines="35-38"}
 ```toml
 [build-system]
 requires = ["hatchling"]