Publish to crates.io #1

	name: Publish to crates.io

	on:
	push:
	tags:
	- 'v..*'

	jobs:
	publish:
	name: Publish crate
	runs-on: ubuntu-latest
	environment: release

	permissions:
	id-token: write
	contents: read

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Install Rust toolchain
	uses: dtolnay/rust-toolchain@stable

	- name: Cache cargo registry
	uses: actions/cache@v4
	with:
	path: ~/.cargo/registry
	key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}

	- name: Cache cargo index
	uses: actions/cache@v4
	with:
	path: ~/.cargo/git
	key: ${{ runner.os }}-cargo-git-${{ hashFiles('**/Cargo.lock') }}

	- name: Cache target directory
	uses: actions/cache@v4
	with:
	path: target
	key: ${{ runner.os }}-target-${{ hashFiles('**/Cargo.lock') }}

	- name: Extract version from tag
	id: version
	run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT

	- name: Verify Cargo.toml version matches tag
	run: \|
	CARGO_VERSION=$(grep '^version = ' Cargo.toml \| head -1 \| sed 's/version = "$.*$"/\1/')
	TAG_VERSION="${{ steps.version.outputs.VERSION }}"
	if [ "$CARGO_VERSION" != "$TAG_VERSION" ]; then
	echo "Error: Cargo.toml version ($CARGO_VERSION) does not match tag version ($TAG_VERSION)"
	exit 1
	fi

	- name: Run tests
	run: cargo test

	- name: Verify package
	run: cargo package

	- name: Authenticate with crates.io via OIDC
	uses: rust-lang/crates-io-auth-action@v1
	id: auth

	- name: Publish to crates.io
	run: cargo publish
	env:
	CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}

Provide feedback