Use trusted publisher instead of secrets.

mcmtroffaes · Sep 12, 2024 · 8f055a7 · 8f055a7
1 parent 9ca4e0b
commit 8f055a7
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -9,6 +9,9 @@ jobs:
   release:
     if: github.repository == 'mcmtroffaes/sphinxcontrib-bibtex'
     runs-on: ubuntu-latest
+      environment: release
+      permissions:
+        id-token: write
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python
@@ -27,11 +30,8 @@ jobs:
         if: ${{ !startsWith(github.ref, 'refs/tags') }}
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
           repository-url: https://test.pypi.org/legacy/
           skip-existing: true
       - name: Publish to PyPI
         if: startsWith(github.ref, 'refs/tags')
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/pyproject.toml b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "sphinxcontrib-bibtex"
-version = "2.6.3a3"
+version = "2.6.3a4"
 license = { text = "BSD-2-Clause" }
 description = "Sphinx extension for BibTeX style citations."
 readme = "README.rst"