Fix PyPI publishing

Signed-off-by: Max Dymond <max.dymond@alianza.com>

Author: maxdymond

.github/workflows/deploy.yml

@@ -6,19 +6,25 @@ on:
 jobs:
   Deploy:
     runs-on: ubuntu-latest
+    permissions:
+      # IMPORTANT: this permission is mandatory for Trusted Publishing
+      id-token: write
     steps:
       - name: 'Set up Python'
         uses: actions/setup-python@v5
         with:
           python-version: 3.9
       - uses: actions/checkout@v4
       - run: bash install.sh
+      # Build the package and publish it.
+      - run: poetry build
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+      # Build the docker image and publish it
       - run: bash deploy.sh
         env:
           DOCKER_USER: ${{ secrets.DOCKER_USER }}
           DOCKER_PASS: ${{ secrets.DOCKER_PASS }}
-          PYPI_USER: ${{ secrets.PYPI_USER }}
-          PYPI_PASS: ${{ secrets.PYPI_PASS }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - run: bash after_deploy.sh
         env:

after_deploy.sh

@@ -2,7 +2,7 @@
 
 echo "Announce changes to the world!"
 
-VERSION=$(tomlq -r '.tool.poetry.version' pyproject.toml)
+VERSION=$(tomlq -r '.project.version' pyproject.toml)
 echo "Version: $VERSION"
 
 # Send announcement to a standalone test webhook.

deploy.sh

@@ -1,14 +1,11 @@
 #!/usr/bin/env bash
 
-VERSION=$(tomlq -r '.tool.poetry.version' pyproject.toml)
+VERSION=$(tomlq -r '.project.version' pyproject.toml)
 echo "Version: $VERSION"
 
 # Log into docker
 docker login -u $DOCKER_USER -p $DOCKER_PASS
 
-echo "Deploying to pypi"
-poetry publish --username $PYPI_USER --password $PYPI_PASS --build
-
 # Try and compile the Docker image - this will fail while the package isn't yet released.
 while ! docker build --build-arg VERSION=$VERSION -t metaswitch/announcer:$VERSION .
 do

install.sh

@@ -5,4 +5,4 @@ set -ex
 # Because poetry doesn't support dev-dependency extras, we need to install these
 # tools outside of the tox poetry environment (because they're not required inside).
 #
-pip install -U poetry tox-gh-actions tomlq
+pip install -U poetry tox-gh-actions yq