From a32ac361ce3f251bc5801a4bb3c43e3eff3ffff2 Mon Sep 17 00:00:00 2001
From: Nate Parsons <4307001+thehomebrewnerd@users.noreply.github.com>
Date: Tue, 20 Feb 2024 10:12:00 -0600
Subject: [PATCH] Use trusted publisher approach for release process and remove
 numpy upper bound (#1819)

* remove numpy upper bound

* update release.yaml

* update release notes

* fix release notes
---
 .github/workflows/release.yaml | 26 +++++++++++++++++---------
 docs/source/release_notes.rst  |  9 ++++++---
 pyproject.toml                 |  2 +-
 3 files changed, 24 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1724f18fe..9b09509df 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -5,17 +5,25 @@ on:
 name: Release
 jobs:
   pypi:
-    name: Release to PyPI
+    name: PyPI Release
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
-    - uses: actions/checkout@v3
-    - name: Upload to PyPI
-      uses: FeatureLabs/gh-action-pypi-upload@v2
-      env:
-        PYPI_USERNAME: ${{ secrets.PYPI_USERNAME }}
-        PYPI_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        TEST_PYPI_USERNAME: ${{ secrets.TEST_PYPI_USERNAME }}
-        TEST_PYPI_PASSWORD: ${{ secrets.TEST_PYPI_PASSWORD }}
+    - uses: actions/checkout@v4
+    - uses: actions/setup-python@v5
+    - name: Install deps
+      run: |
+        python -m pip install --quiet --upgrade pip
+        python -m pip install --quiet --upgrade build
+        python -m pip install --quiet --upgrade setuptools
+    - name: Remove build artifacts and docs
+      run: |
+        rm -rf .eggs/ dist/ build/ docs/
+    - name: Build distribution
+      run: python -m build
+    - name: Publish package distributions to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
     - name: Run workflow to create feedstock pull request
       run: |
         gh workflow run create_feedstock_pr.yaml --repo "alteryx/woodwork" -f version=${{ github.event.release.tag_name }}
diff --git a/docs/source/release_notes.rst b/docs/source/release_notes.rst
index 92c015cbc..6dfc0b4cf 100644
--- a/docs/source/release_notes.rst
+++ b/docs/source/release_notes.rst
@@ -3,15 +3,18 @@
 Release Notes
 -------------
 
-.. Future Release
-  ==============
+Future Release
+==============
     * Enhancements
     * Fixes
     * Changes
+      * Remove numpy upper bound restriction in ``pyproject.toml`` :pr:`1819`
     * Documentation Changes
     * Testing Changes
+      * Update ``release.yaml`` to use trusted publisher for PyPI releases :pr:`1819`
 
-.. Thanks to the following people for contributing to this release:
+  Thanks to the following people for contributing to this release:
+  :user:`thehomebrewnerd`
 
 v0.28.0 Feb 5, 2024
 ===================
diff --git a/pyproject.toml b/pyproject.toml
index 4180e6245..19346af27 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -34,7 +34,7 @@ dependencies = [
     "python-dateutil >= 2.8.1",
     "scipy >= 1.10.0",
     "importlib-resources >= 5.10.0",
-    "numpy >= 1.25.0, <2.0.0",
+    "numpy >= 1.25.0",
 ]
 
 [project.urls]