@@ -284,19 +284,19 @@ jobs:
|
284 | 284 | needs: [build_wheels] |
285 | 285 | runs-on: ubuntu-latest |
286 | 286 | environment: release |
| 287 | +permissions: |
| 288 | +id-token: write # IMPORTANT: this permission is mandatory for trusted publishing |
287 | 289 | |
288 | 290 | steps: |
289 | 291 | - uses: actions/download-artifact@v4 |
290 | 292 | with: |
291 | 293 | # unpacks default artifact into dist/ |
292 | 294 | # if `name: artifact` is omitted, the action will create extra parent dir |
293 | | -pattern: wheels-* |
294 | 295 | path: dist |
| 296 | +pattern: wheels-* |
295 | 297 | merge-multiple: true |
296 | 298 | |
297 | | - - uses: pypa/gh-action-pypi-publish@v1.12.4 |
298 | | -with: |
299 | | -user: __token__ |
300 | | -password: ${{ secrets.PYPI_TOKEN }} |
| 299 | + - uses: |
| 300 | +pypa/gh-action-pypi-publish@v1.12.4 |
301 | 301 | |
302 | 302 | # To test: repository_url: https://test.pypi.org/legacy/ |