feat: use trusted publishing to upload wheels (#445)

This commit is contained in:
J. Nick Koston 2025-04-01 09:51:03 -10:00 committed by GitHub
parent f59d9f92c7
commit 19df2666ab
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -217,7 +217,9 @@ jobs:
needs: [build_wheels] needs: [build_wheels]
runs-on: ubuntu-latest runs-on: ubuntu-latest
environment: release environment: release
permissions:
id-token: write
contents: write
steps: steps:
- uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4 - uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with: with:
@ -228,8 +230,3 @@ jobs:
merge-multiple: true merge-multiple: true
- uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4 - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
with:
user: __token__
password: ${{ secrets.PYPI_TOKEN }}
# To test: repository_url: https://test.pypi.org/legacy/