fix: use trusted publishing for uploading wheels (#1541) · python-zeroconf/python-zeroconf@fa65cc8

Original file line numberDiff line numberDiff line change

@@ -284,19 +284,19 @@ jobs:

284284

needs: [build_wheels]

285285

runs-on: ubuntu-latest

286286

environment: release

287+

permissions:

288+

id-token: write # IMPORTANT: this permission is mandatory for trusted publishing

287289
288290

steps:

289291

- uses: actions/download-artifact@v4

290292

with:

291293

# unpacks default artifact into dist/

292294

# if `name: artifact` is omitted, the action will create extra parent dir

293-

pattern: wheels-*

294295

path: dist

296+

pattern: wheels-*

295297

merge-multiple: true

296298
297-

- uses: pypa/gh-action-pypi-publish@v1.12.4

298-

with:

299-

user: __token__

300-

password: ${{ secrets.PYPI_TOKEN }}

299+

- uses:

300+

pypa/gh-action-pypi-publish@v1.12.4

301301
302302

# To test: repository_url: https://test.pypi.org/legacy/