diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0fae21f..2ef79bb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -9,6 +9,8 @@ jobs: release: name: Release runs-on: ubuntu-latest + permissions: + id-token: write # IMPORTANT: this permission is mandatory for trusted publishing steps: - name: Check out the repository uses: actions/checkout@v4 @@ -41,7 +43,8 @@ jobs: - name: Bump version for developmental release if: "! steps.check-version.outputs.tag" run: | - pdm bump dev + dev_version="$(echo $(pdm show --version).dev$(date +%s))" + pdm bump to "$dev_version" - name: Install dependencies with PDM run: | @@ -53,17 +56,12 @@ jobs: - name: Publish package on PyPI if: steps.check-version.outputs.tag - uses: pypa/gh-action-pypi-publish@v1.8.11 - with: - user: __token__ - password: ${{ secrets.PYPI_TOKEN }} + uses: pypa/gh-action-pypi-publish@release/v1 - name: Publish package on TestPyPI if: "! steps.check-version.outputs.tag" - uses: pypa/gh-action-pypi-publish@v1.8.11 + uses: pypa/gh-action-pypi-publish@release/v1 with: - user: __token__ - password: ${{ secrets.TEST_PYPI_TOKEN }} repository-url: https://test.pypi.org/legacy/ - name: Publish the release notes