Update to use trusted publisher on pypi

Author: theskumar

.github/workflows/release.yml

@@ -5,24 +5,32 @@ on:
     types: [created]
 
 jobs:
-  deploy:
+  publish:
     runs-on: ubuntu-latest
+    # Specifying a GitHub environment is optional, but strongly encouraged
+    environment: release
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
+
     steps:
       - uses: actions/checkout@v5
+
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
           python-version: "3.x"
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install build twine
-      - name: Build and publish
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        run: |
-          make release
+          pip install build
+
+      - name: Build package distributions
+        run: make sdist
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
 
       - name: Publish Documentation
         run: |

Makefile

@@ -12,13 +12,6 @@ clean-pyc:
 	find . -name '*.pyo' -exec rm -f {} +
 	find . -name '*~' -exec rm -f {} +
 
-release: sdist
-	twine check dist/*
-	twine upload dist/*
-
-release-test: sdist
-	twine upload --repository-url https://test.pypi.org/legacy/ dist/*
-
 sdist: clean
 	python -m build -o dist .
 	ls -l dist

requirements.txt

@@ -5,7 +5,7 @@ pytest-cov
 pytest>=3.9
 sh>=2
 tox
-twine
 wheel
 ruff
+build
 pre-commit