Add trusted publishing

Author: surister

.github/workflows/release_python.yml

@@ -7,29 +7,38 @@ jobs:
   build:
     name: Build and publish package to PyPI
     runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      # IMPORTANT: this permission is mandatory for Trusted Publishing
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
+      - name: Set VERSION from tag
+        run: |
+          sed -i -E "s/^version = \".*\"/version = \"${GITHUB_REF#refs/*/v}\"/" pyproject.toml
+
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
           python-version: '3.12'
 
-      - name: Generate grammar
+      - name: Set up dependencies
         run: |
           python -m pip install -r requirements.txt
+          python -m pip install build twine
+
+      - name: Generate grammar
+        run: |
           python setup_grammar.py python
 
       - name: Build package
+        working-directory: 'cratedb_sqlparse_py'
         run: |
-          python -m pip install build twine
-          cd cratedb_sqlparse_py
           python -m build
           twine check dist/{*.tar.gz,*.whl}
 
       - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          packages-dir: cratedb_sqlparse_py/dist/
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
+        working-directory: 'cratedb_sqlparse_py'
+        run: |
+          python -m twine upload dist/*