Merge pull request #924 from Nothing4You/pypi-trusted-publishing

Implement Trusted Publishing for prod PyPI

Author: webknjaz

.github/workflows/ci-cd.yml

@@ -653,6 +653,9 @@ jobs:
           needs.pre-setup.outputs.dist-version
         }}
 
+    permissions:
+      id-token: write  # this permission is mandatory for trusted publishing
+
     steps:
     - name: Download all the dists
       uses: actions/download-artifact@v3
@@ -663,7 +666,6 @@ jobs:
         Publish 🐍📦 ${{ needs.pre-setup.outputs.git-tag }} to PyPI
       uses: pypa/[email protected]
       with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
         print_hash: true
 
   publish-testpypi: