Update CI configuration

.github/workflows/tests.yml

@@ -34,24 +34,22 @@ jobs:
       matrix:
         python-version: ['3.9', '3.12']
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         # we need the full history to be able to get the chemiscope version with
         # git describe during the build
         with:
           fetch-depth: 0
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: '22.x'
           cache: 'npm'
       - name: configure access to git repositories in package-lock.json
         run: git config --global url."https://github.com/".insteadOf ssh://[email protected]
       - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install tox==4.14.0
+        run: python3 -m pip install tox
       - name: Run Python tests
         run: tox

.github/workflows/website.yml

@@ -8,27 +8,28 @@ on:
 
 jobs:
   build-website:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         # we need the full history to be able to get the chemiscope version with
         # git describe during the build
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: '22.x'
           cache: 'npm'
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: '3.11'
       - name: configure access to git repositories in package-lock.json
         run: git config --global url."https://github.com/".insteadOf ssh://[email protected]
       - name: install npm dependencies
         run: npm ci
       - name: install python dependencies
-        run: |
-          python3 -m pip install tox==4.14.0
+        run: python3 -m pip install tox
       - run: npm run build
       - run: npm run download-examples
       - run: tox -e docs
@@ -43,7 +44,7 @@ jobs:
       - name: deploy website to gh-pages
         # only deploy website from main branch
         if: github.ref == 'refs/heads/main'
-        uses: peaceiris/actions-gh-pages@v3
+        uses: peaceiris/actions-gh-pages@v4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./gh-pages/
@@ -53,7 +54,7 @@ jobs:
       - name: upload minified JS to GitHub release
         # only upload minified JS from tags
         if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           files: |
             dist/chemiscope.d.ts

.github/workflows/wheel.yml

@@ -3,24 +3,25 @@ name: Build Python wheel
 on:
   push:
     branches: [main]
-    tags: '*'
+    tags: ['v*']
   pull_request:
     # Check all PR
 
 jobs:
   build-wheels:
+    permissions:
+      contents: write
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - name: Set up Python
-        uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: '3.11'
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: 20.x
 
@@ -36,3 +37,13 @@ jobs:
           path: |
             dist/*.tar.gz
             dist/*.whl
+
+      - name: upload wheel & sdist to GitHub release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            dist/*.tar.gz
+            dist/*.whl
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}