diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 90fbf91b..4054a07f 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -365,15 +365,22 @@ jobs: runs-on: ubuntu-latest environment: Publish needs: [linux, windows, macos_x86, macos_aarch64, sdist] + permissions: + # IMPORTANT: this permission is mandatory for Trusted Publishing + id-token: write steps: + - uses: actions/checkout@v4 - uses: actions/download-artifact@v4 with: pattern: wheels-* - name: wheels - - name: Publish to PyPI - uses: PyO3/maturin-action@v1 - env: - MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }} + path: dist + merge-multiple: true + - name: List contents of dist directory + run: ls -la dist/ + - name: Publish to PyPi + uses: pypa/gh-action-pypi-publish@release/v1 with: - command: upload - args: --non-interactive --skip-existing * + packages_dir: dist + username: __token__ + password: ${{ secrets.PYPI_TOKEN }} +