commit 3556e52bb65c98e478ed3ff184bbcddedbbe2231
from: Jelmer Vernooij <jelmer@jelmer.uk>
via: GitHub <noreply@github.com>
date: Mon Apr 22 19:45:43 2024 UTC

Merge pull request #1284 from jelmer/pypi-deploys

Fix pypi deployments

commit - 1fa6259ebfa5ddcefca8c0243f5699695e2f58fd
commit + 3556e52bb65c98e478ed3ff184bbcddedbbe2231
blob - 5dd4981b8fcf093cd267f9bb2692e8a2c7679815
blob + 4d517953885ca494bc78c567931afb77b7a1b594
--- .github/workflows/python-distributions.yml
+++ .github/workflows/python-distributions.yml
@@ -63,18 +63,16 @@ jobs:
       - build-wheels
       - build-sdist
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/dulwich-')
+    permissions:
+      id-token: write
+    environment:
+      name: pypi
+      url: https://pypi.org/p/dulwich
     steps:
-      - name: Install twine
-        run: |
-          python -m pip install --upgrade pip
-          pip install twine
       - name: Download distributions
         uses: actions/download-artifact@v2
         with:
           name: artifact
           path: dist
-      - name: Publish distributions
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        run: twine upload dist/*
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1