Switch PyPI releasing to the trusted publishing model (#891)

pypa · Jun 18, 2023 · d256375 · d256375
1 parent 17308ad
commit d256375
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 9 deletions.
diff --git a/.github/workflows/build-hatch.yml b/.github/workflows/build-hatch.yml
@@ -448,6 +448,10 @@ jobs:
     - macos-packaging
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+      id-token: write
+
     steps:
     - name: Download Python artifacts
       uses: actions/download-artifact@v3
@@ -471,8 +475,6 @@ jobs:
       uses: pypa/gh-action-pypi-publish@v1.8.6
       with:
         skip-existing: true
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
 
     - name: Add assets to current release
       uses: softprops/action-gh-release@v1

diff --git a/.github/workflows/build-hatchling.yml b/.github/workflows/build-hatchling.yml
@@ -5,9 +5,6 @@ on:
     tags:
     - hatchling-v*
 
-concurrency:
-  group: build-hatchling-${{ github.head_ref }}
-
 jobs:
   build:
     name: Build wheels and source distribution
@@ -34,15 +31,16 @@ jobs:
     - build
     runs-on: ubuntu-latest
 
+    permissions:
+      id-token: write
+
     steps:
     - uses: actions/download-artifact@v3
       with:
         name: artifacts
         path: dist
 
     - name: Push build artifacts to PyPI
-      uses: pypa/gh-action-pypi-publish@v1.8.5
+      uses: pypa/gh-action-pypi-publish@v1.8.6
       with:
-        skip_existing: true
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN_HATCHLING }}
+        skip-existing: true