Merge branch 'ci/publish' into 'main'

Only automatically publish if tagged commits are on main

See merge request !32

.gitlab-ci.yml

@@ -53,8 +53,8 @@ pypi:
   script:
     - python -m hatch publish -y
   rules:
-    - if: '$CI_COMMIT_TAG =~ /^v\d{4}\.\d{1,2}\.\d{1,2}$/'
-      # Always publish tagged commits matching CalVer
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && '$CI_COMMIT_TAG =~ /^v\d{4}\.\d{1,2}\.\d{1,2}$/'
+      # Always publish tagged commits to main and matching CalVer
       when: on_success
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
       # Allow manually pushing to pypi