Update authentication to OIDC for pypi uploads

.github/workflows/python-publish.yml

@@ -8,24 +8,26 @@ on:
  types: [created]
 
 jobs:
- deploy:
-
+ pypi-publish:
+ name: upload release to PyPI
  runs-on: ubuntu-latest
-
+ environment:
+ name: pypi
+ url: https://pypi.org/p/hsclient
+ # Specifying a GitHub environment is optional, but strongly encouraged
+ # environment: release
+ permissions:
+ # IMPORTANT: this permission is mandatory for trusted publishing
+ id-token: write
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v2
  - name: Set up Python
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v2
  with:
  python-version: '3.x'
- - name: Install dependencies
- run: |
- python -m pip install --upgrade pip
- pip install setuptools wheel twine
- - name: Build and publish
- env:
- TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
- TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
+ - name: Build Distribution
  run: |
- python setup.py sdist bdist_wheel
- twine upload dist/*
+ python -m pip install --upgrade build
+ python -m build
+ - name: Publish package distributions to PyPI
+ uses: pypa/gh-action-pypi-publish@release/v1