Use dedicated GH action to publish to PyPI

Author: jacopofar

.github/workflows/python-package.yaml

@@ -37,14 +37,18 @@ jobs:
     name: Publish package to PyPI
     if: startsWith(github.ref, 'refs/tags')
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypy.org/p/kafka-schema-registry
+    permissions:
+      id-token: write
     needs: test
     steps:
     - uses: actions/checkout@v2
 
     - uses: actions/setup-python@v2
 
-    - name: Publish package to PyPI
-      run: make release
-      env:
-        TWINE_USERNAME: __token__
-        TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+    - name: Build files to upload to PyPI
+      run: make build_dist
+    - name: Publish package distributions to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1

Makefile

@@ -42,11 +42,10 @@ test: $(VENV)
 lint: $(VENV)
 	$(BIN)/flake8
 
-.PHONY: release
-release: $(VENV)
+.PHONY: build_dist
+build_dist: $(VENV)
 	rm -rf dist
 	$(BIN)/python setup.py sdist bdist_wheel
-	$(BIN)/twine upload dist/*
 
 .PHONY: clean
 clean:

requirements-dev.txt

@@ -2,6 +2,5 @@ pytest==8.3.4
 pytest-cov==6.0.0
 flake8==7.1.1
 responses==0.25.3
-twine==6.0.1
 wheel==0.45.1