Merge pull request #55 from DEIS-Tools/53-move-to-secretless-publishing-to-pypi

Move to secretless publishing to pypi

Author: magoorden

.github/workflows/to_pypi.yml

@@ -23,7 +23,7 @@ jobs:
     - name: Build a binary wheel and a source tarball
       run: python3 -m build
     - name: Store the distribution packages
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: python-package-distributions
         path: dist/
@@ -34,18 +34,21 @@ jobs:
     needs:
     - build
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/strategoutil
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing
 
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
       with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
         verbose: true
-        skip_existing: true
+        skip-existing: true
 

setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = strategoutil
-version = 0.1.2
+version = 0.1.4
 author = Mihhail Samusev, Martijn Goorden
 author_email = [email protected], [email protected]
 description = Python utility functions library for UPPAAL Stratego