switch to trusted publishing, skip unnecessary double build on mac, cleanup and bump versions

Author: hendrikmuhs

.github/workflows/keyvi.yml

@@ -38,7 +38,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: ccache
-        uses: hendrikmuhs/ccache-action@v1.2.11
+        uses: hendrikmuhs/ccache-action@v1.2.18
         with:
           key: ${{ matrix.os }}-${{ matrix.type }}
 

.github/workflows/python-cibuildwheel.yml

@@ -25,16 +25,13 @@ jobs:
         exclude:
           - os: macos-13
             target: musl
-          # skip pypy, https://github.com/pypa/distutils/issues/283
-          #- os: ubuntu-22.04
-          #  target: musl
-          #  flavor: pypy
-          #- os: macos-13
-          #  flavor: pypy
+          - os: macos-14
+            target: musl
+
     steps:
       - uses: actions/checkout@v5
       - name: ccache
-        uses: hendrikmuhs/ccache-action@v1.2.11
+        uses: hendrikmuhs/ccache-action@v1.2.18
         with:
           key: ${{ matrix.os }}-${{ matrix.target }}-${{ matrix.flavor }}-python
 
@@ -79,8 +76,7 @@ jobs:
       - name: Build python wheels for ${{ matrix.os }}
         uses: pypa/cibuildwheel@v3.1.4
         env:
-          # Skip CPython 3.{6, 7, 8}
-          CIBW_SKIP: ${{ env.CIBW_SKIP }} cp36-* cp37-* cp38-*
+          CIBW_SKIP: ${{ env.CIBW_SKIP }}
 
           # only build native packages
           CIBW_ARCHS: native
@@ -127,7 +123,7 @@ jobs:
         sudo apt-get update && \
         sudo apt-get install -y libsnappy-dev libzzip-dev zlib1g-dev libboost-all-dev ccache
     - name: ccache
-      uses: hendrikmuhs/ccache-action@v1.2.11
+      uses: hendrikmuhs/ccache-action@v1.2.18
       with:
         key: ubuntu-sdist-python
 
@@ -152,6 +148,11 @@ jobs:
     needs: [build_wheels, build_sdist]
     runs-on: ubuntu-latest
     if: github.event_name == 'release'
+    environment:
+      name: pypi
+      url: https://pypi.org/p/keyvi
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v5
         with:
@@ -160,5 +161,3 @@ jobs:
           path: dist
 
       - uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.pypi_password }}