diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml index 9134142b..7553aaf9 100644 --- a/.github/workflows/pypi.yaml +++ b/.github/workflows/pypi.yaml @@ -28,6 +28,8 @@ jobs: needs: test-build if: startsWith(github.ref, 'refs/tags') runs-on: ubuntu-latest + permissions: + id-token: write steps: - uses: actions/checkout@v4 - name: Set up Python @@ -49,7 +51,5 @@ jobs: - name: Publish package to PyPI uses: pypa/gh-action-pypi-publish@v1.8.11 with: - user: __token__ - password: ${{ secrets.PYPI_PASSWORD }} - skip_existing: true + skip-existing: true verbose: true diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 7a1c4a0f..2bf62d29 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -12,6 +12,7 @@ Internal Changes ^^^^^^^^^^^^^^^^ * Upstream CI improvements by `Anissa Zacharias`_ in (:pr:`527`) * CI improvements by `Anissa Zacharias`_ in (:pr:`528`) +* Switch to PyPI Trusted Publishing by `Anissa Zacharias`_ in (:pr:`534`) * Add retry actions to CI by `Anissa Zacharias`_ in (:pr:`532`) * Improves/standardizes release tests and adds PyPI release testing by `Anissa Zacharias`_ in (:pr:`531`)