Bump up gh-action-pypi-publish to v1.9.0 (#133)

Remove use of token, use trusted provider instead: https://github.com/pypa/gh-action-pypi-publish/?tab=readme-ov-file#trusted-publishing
scikit-learn-contrib · Aug 13, 2024 · 6b1d193 · 6b1d193
1 parent 19cc928
commit 6b1d193
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
@@ -15,6 +15,8 @@ jobs:
   build-n-publish:
     name: Build and publish Python 🐍 distributions 📦 to PyPI
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # OIDC for PyPi Trusted Publisher feature
     steps:
     - uses: actions/checkout@v3
     - name: Set up Python 3.10
@@ -36,6 +38,4 @@ jobs:
     - name: Build a binary wheel
       run: python setup.py sdist bdist_wheel
     - name: Publish distribution 📦 to PyPI
-      uses: pypa/gh-action-pypi-publish@v1.8.10
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
+      uses: pypa/gh-action-pypi-publish@v1.9.0