Update the pypa/gh-action-pypi-publish action version (#15)

deshaw · May 8, 2024 · f8e729c · f8e729c
1 parent 50cf339
commit f8e729c
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
@@ -129,6 +129,11 @@ jobs:
     runs-on: ubuntu-latest
     if: (github.event_name == 'release' && startsWith(github.ref, 'refs/tags')) || (github.event_name == 'workflow_dispatch')
     needs: [build_wheels, build_sdist]
+    environment:
+      name: pypi
+      url: https://pypi.org/p/nbstripout-fast
+    permissions:
+      id-token: write
     steps:
       - name: Retrieve wheels and sdist
         uses: actions/download-artifact@v3
@@ -138,7 +143,6 @@ jobs:
           ls -lAs wheels/
 
       - name: Upload to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1.5
+        uses: pypa/gh-action-pypi-publish@release/v1.8
         with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
           packages_dir: wheels/