👷 update publish.yml to add concurrency control, improve package metadata checks, and ensure py.typed inclusion

Author: techouse

.github/workflows/publish.yml

@@ -8,6 +8,8 @@ defaults:
   run:
     shell: bash
 permissions: read-all
+env:
+  NAME: mysql-to-sqlite3
 
 jobs:
   test:
@@ -19,10 +21,13 @@ jobs:
     runs-on: ubuntu-latest
     environment:
       name: pypi
-      url: https://pypi.org/p/mysql-to-sqlite3
+      url: https://pypi.org/p/${{ env.NAME }}
     permissions:
       id-token: write
       contents: write
+    concurrency:
+      group: publish-${{ github.ref }}
+      cancel-in-progress: false
     steps:
       - uses: actions/checkout@v5
       - name: Compare package version with ref/tag
@@ -32,7 +37,7 @@ jobs:
           VERSION=$(awk -F'"' '/__version__/ {print $2}' src/mysql_to_sqlite3/__init__.py)
           TAG=${GITHUB_REF_NAME#v}
           if [[ "$VERSION" != "$TAG" ]]; then
-            echo "Version in src/mysql_to_sqlite3/__version__.py ($VERSION) does not match tag ($TAG)"
+            echo "Version in src/mysql_to_sqlite3/__init__.py ($VERSION) does not match tag ($TAG)"
             exit 1
           fi
           echo "VERSION=$VERSION" >> $GITHUB_ENV
@@ -49,32 +54,33 @@ jobs:
         uses: actions/setup-python@v5
         with:
           python-version: "3.x"
+          cache: "pip"
       - name: Install build dependencies
         id: install_build_dependencies
         run: |
           set -e
-          python3 -m pip install --upgrade pip
-          pip install build setuptools wheel
+          python3 -m pip install -U pip
+          python3 -m pip install -U build
       - name: Build a binary wheel and a source tarball
         id: build
         run: |
           set -e
           python3 -m build --sdist --wheel --outdir dist/ .
-      - name: Publish distribution package to PyPI
-        id: publish
-        if: startsWith(github.ref, 'refs/tags')
-        uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70 # v1.12.3
-      - name: Install pyproject-parser
-        id: install_pyproject_parser
+      - name: Verify package metadata (twine)
+        id: twine_check
         run: |
           set -e
-          pip install pyproject-parser[cli]
-      - name: Read project name from pyproject.toml
-        id: read_project_name
+          python3 -m pip install -U twine
+          twine check dist/*
+      - name: Ensure py.typed is packaged
+        id: assert_py_typed
         run: |
           set -e
-          NAME=$(pyproject-parser info project.name -r | tr -d '"')
-          echo "NAME=$NAME" >> $GITHUB_ENV
+          unzip -l dist/*.whl | grep -q 'mysql_to_sqlite3/py.typed'
+      - name: Publish distribution package to PyPI
+        id: publish
+        if: startsWith(github.ref, 'refs/tags')
+        uses: pypa/gh-action-pypi-publish@release/v1
       - name: Create tag-specific CHANGELOG
         id: create_changelog
         run: |