Update CI.yaml

.github/workflows/CI.yaml

@@ -1,14 +1,15 @@
-# This file is autogenerated by maturin v1.5.1
+# This file is autogenerated by maturin v1.7.4
 # To update, run
 #
-#    maturin generate-ci  github
+#    maturin generate-ci github
 #
 name: CI
 
 on:
     push:
         branches:
-            - '*'
+            - main
+            - master
         tags:
             - '*'
     pull_request:
@@ -39,12 +40,12 @@ jobs:
             - uses: actions/checkout@v4
             - uses: actions/setup-python@v5
               with:
-                  python-version: '3.10'
+                  python-version: 3.x
             - name: Build wheels
               uses: PyO3/maturin-action@v1
               with:
                   target: ${{ matrix.platform.target }}
-                  args: --release --out dist --find-interpreter 
+                  args: --release --out dist --find-interpreter
                   sccache: 'true'
                   manylinux: auto
             - name: Upload wheels
@@ -53,6 +54,37 @@ jobs:
                   name: wheels-linux-${{ matrix.platform.target }}
                   path: dist
 
+    musllinux:
+        runs-on: ${{ matrix.platform.runner }}
+        strategy:
+            matrix:
+                platform:
+                    - runner: ubuntu-latest
+                      target: x86_64
+                    - runner: ubuntu-latest
+                      target: x86
+                    - runner: ubuntu-latest
+                      target: aarch64
+                    - runner: ubuntu-latest
+                      target: armv7
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-python@v5
+              with:
+                  python-version: 3.x
+            - name: Build wheels
+              uses: PyO3/maturin-action@v1
+              with:
+                  target: ${{ matrix.platform.target }}
+                  args: --release --out dist --find-interpreter
+                  sccache: 'true'
+                  manylinux: musllinux_1_2
+            - name: Upload wheels
+              uses: actions/upload-artifact@v4
+              with:
+                  name: wheels-musllinux-${{ matrix.platform.target }}
+                  path: dist
+
     windows:
         runs-on: ${{ matrix.platform.runner }}
         strategy:
@@ -66,7 +98,7 @@ jobs:
             - uses: actions/checkout@v4
             - uses: actions/setup-python@v5
               with:
-                  python-version: '3.10'
+                  python-version: 3.x
                   architecture: ${{ matrix.platform.target }}
             - name: Build wheels
               uses: PyO3/maturin-action@v1
@@ -85,15 +117,15 @@ jobs:
         strategy:
             matrix:
                 platform:
-                    - runner: macos-latest
+                    - runner: macos-12
                       target: x86_64
                     - runner: macos-14
                       target: aarch64
         steps:
             - uses: actions/checkout@v4
             - uses: actions/setup-python@v5
               with:
-                  python-version: '3.10'
+                  python-version: 3.x
             - name: Build wheels
               uses: PyO3/maturin-action@v1
               with:
@@ -124,11 +156,23 @@ jobs:
     release:
         name: Release
         runs-on: ubuntu-latest
-        if: "startsWith(github.ref, 'refs/tags/')"
-        needs: [linux, windows, macos, sdist]
+        if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
+        needs: [linux, musllinux, windows, macos, sdist]
+        permissions:
+            # Use to sign the release artifacts
+            id-token: write
+            # Used to upload release artifacts
+            contents: write
+            # Used to generate artifact attestation
+            attestations: write
         steps:
             - uses: actions/download-artifact@v4
+            - name: Generate artifact attestation
+              uses: actions/attest-build-provenance@v1
+              with:
+                  subject-path: 'wheels-*/*'
             - name: Publish to PyPI
+              if: "startsWith(github.ref, 'refs/tags/')"
               uses: PyO3/maturin-action@v1
               env:
                   MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}