Bump actions/download-artifact from 3 to 4.1.7 in /.github/workflows #17

	name: Build and upload to PyPI

	# Build on every branch push, tag push, and pull request change:
	# on: [push, pull_request]
	# Alternatively, to publish when a (published) GitHub Release is created, use the following:
	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	release:
	types:
	- published

	jobs:
	build_sdist:
	name: Build source distribution
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	with:
	fetch-depth: 0

	- uses: actions/setup-python@v4
	name: Install Python
	with:
	python-version: '3.7'

	- run: pip install -e .

	- run: python -c "import socialforce; print(socialforce.__version__)"
	- run: git status
	- run: git diff
	- run: python -c "import socialforce; assert 'dirty' not in socialforce.__version__"

	- name: Build sdist
	run: python setup.py sdist

	- uses: actions/upload-artifact@v3
	with:
	path: dist/*.tar.gz

	upload_pypi:
	needs: [build_sdist]
	runs-on: ubuntu-latest
	# upload to PyPI on every tag starting with 'v'
	# if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v')
	# alternatively, to publish when a GitHub Release is created, use the following rule:
	if: github.event_name == 'release' && github.event.action == 'published'
	steps:
	- uses: actions/download-artifact@v4.1.7
	with:
	name: artifact
	path: dist

	- uses: pypa/gh-action-pypi-publish@release/v1
	with:
	user: __token__
	password: ${{ secrets.PYPI_TOKEN }}
	# To test: repository_url: https://test.pypi.org/legacy/

Provide feedback