Skip to content

Commit 35c6a7a

Browse files
committed
ci: Can't use Trusted Publisher so reverting to old publishing pattern
1 parent cab4270 commit 35c6a7a

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

.github/workflows/release.yml

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -58,18 +58,17 @@ jobs:
5858
if: "startsWith(github.ref, 'refs/tags/v')"
5959
needs: "build"
6060
environment: "pypi"
61-
permissions:
62-
# IMPORTANT: this permission is mandatory for Trusted Publishing
63-
id-token: "write"
6461
steps:
6562
- name: "Retrieve built package from cache"
6663
uses: "actions/download-artifact@v4"
6764
with:
6865
name: "distfiles"
6966
path: "dist/"
70-
71-
- name: "Publish package distributions to PyPI"
72-
uses: "pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e" # v1.13.0
67+
- name: "Push to PyPI"
68+
uses: "pypa/gh-action-pypi-publish@release/v1"
69+
with:
70+
user: "__token__"
71+
password: "${{ secrets.PYPI_API_TOKEN }}"
7372

7473
slack-notify:
7574
needs:

0 commit comments

Comments
 (0)