build-matplotlib: use correct publish logic

.github/workflows/build-matplotlib.yml

@@ -173,28 +173,17 @@ jobs:
     # version. Manual trigger is the only entry point that reaches main;
     # PR runs sit on refs/pull/<n>/merge and skip this job.
     if: github.ref == 'refs/heads/main'
-    runs-on: ubuntu-24.04-riscv
+    runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
+      pull-requests: write
 
     steps:
-      - name: Checkout python-wheels
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
-        with:
-          path: python-wheels
-          persist-credentials: false
-
-      - name: Download wheels
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
-        with:
-          name: matplotlib-${{ env.MPL_VERSION }}-cibw-wheels-riscv64
-          path: dist
-
-      - name: Publish to GitLab PyPI registry
-        uses: ./python-wheels/actions/publish-to-gitlab
+      - name: Publish wheels and open docs PR
+        uses: riseproject-dev/python-wheels/actions/publish-wheels@main
         with:
+          artifact-pattern: matplotlib-${{ env.MPL_VERSION }}-*-manylinux_riscv64
           gitlab-username: ${{ vars.GITLAB_DEPLOY_USER }}
           gitlab-token: ${{ secrets.GITLAB_DEPLOY_TOKEN }}
           gitlab-project-id: ${{ vars.GITLAB_PROJECT_ID }}
-          files: |
-            dist/*.whl
+          gh-token: ${{ secrets.GITHUB_TOKEN }}