build: use trusted publisher and bump gh-action-pypi-publish to v1.8.14

eoleedi · Apr 10, 2024 · 290bbd6 · 290bbd6
1 parent b618f37
commit 290bbd6
Showing 1 changed file with 5 additions and 6 deletions.
diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
@@ -17,9 +17,11 @@ permissions:
 
 jobs:
   deploy:
-
+    name: upload release to PyPI
     runs-on: ubuntu-latest
-
+    environment: release
+    permissions:
+      id-token: write
     steps:
     - uses: actions/checkout@v4
     - name: Set up Python
@@ -33,7 +35,4 @@ jobs:
     - name: Build package
       run: python -m build
     - name: Publish package
-      uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
+      uses: pypa/gh-action-pypi-publish@v1.8.14