Use PyPI's trusted publishing (#224)

jupyter-server · Jan 23, 2025 · 868275b · 868275b
1 parent 05bdacc
commit 868275b
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -162,12 +162,13 @@ jobs:
           merge-multiple: true
       - uses: actions/setup-python@v5
       - name: Publish to PyPI
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        run: |
-          pip install --upgrade twine
-          twine upload --skip-existing dist/*
+        uses: PyO3/maturin-action@v1
+        environment: release
+        permissions:
+          id-token: write
+        with:
+          command: upload
+          args: --non-interactive --skip-existing dist/*
 
   github-release:
     name: Create GitHub release