Merge pull request #119 from moj-analytical-services/update_pypi_release

update pypi action and dependencies
moj-analytical-services · Nov 14, 2023 · 276c33a · 276c33a
2 parents f7b2e35 + 1134bdc
commit 276c33a
Show file tree

Hide file tree

Showing 5 changed files with 1,034 additions and 1,775 deletions.
diff --git a/.github/workflows/poetry-pypi-release.yml b/.github/workflows/poetry-pypi-release.yml
@@ -6,11 +6,13 @@ on:
 jobs:
   poetry-publish:
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 1
       - name: release to PyPI
         uses: moj-analytical-services/actions-poetry-pypi-release@v1
-        with:
-          pypi-api-token: ${{ secrets.PYPI_API_TOKEN }}
+
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## v5.5.10 - 2023-11-10
+
+- Update dependencies for security
+- Updates pypi action for Trusted Publisher
+
+
 ## v5.5.9 - 2023-09-29
 
 - Fix for SSO without breaking AP