Updates the publish workflow to use the trusted publisher setup #1619
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I don't know if this is new or I missed it in my original pull request, but this updates the publish job so it will utilize PyPI's trusted publishing instead of token based auth. The main benefit seems to be scoped tokens and no more manual publishing. But it's a minor update to include this and seems to be the preferred way, so here it is.
The action's setup for this can be found here: https://github.com/pypa/gh-action-pypi-publish/tree/release/v1/#trusted-publishing
There is some action to take on PyPI, as described here: https://docs.pypi.org/trusted-publishers/adding-a-publisher/