Update release CI to use OCID publishing

[WardBrian]

I don't have permissions on the pypi package (side note: it would be nice to transfer ownership of the pypi package to https://pypi.org/org/stan-dev/), so I'm opening this to ping @serban-nicusor-toptal @ahartikainen in hopes they can help

https://docs.pypi.org/trusted-publishers/

[ahartikainen]

Let me check if I have permissions.

[ahartikainen]

So, I'm manager in pypi: stan-dev but I have been removed from pypi: CmdStanPy package,so I don't know who currently handles it.

[WardBrian]

Are you not https://pypi.org/user/ahartikainen/? You're listed first on the sidebar of https://pypi.org/project/cmdstanpy/ (but maybe this is just alphabetical?)

[ahartikainen]

Yes, that is me.

[ahartikainen]

Ok, I have a maintainer role, so I can't invite

[serban-nicusor-toptal]

Hey @WardBrian apparently I am the owner of stan-dev org that includes stanio and posteriordb
@WardBrian is an Owner and @ahartikainen I changed him to Owner from Manager.
I am not entirely sure how I can transfer the ownership of the pypi package ? Let me know if I can help with anything

[ahartikainen]

Hi @serban-nicusor-toptal what is your role in pypi:CmdStanPy (check under 'Your projects')?

Do you know who is the owner of CmdStanPy user?

[serban-nicusor-toptal]

Sadly I do not know who owns that :(
It doesn't even show up under Organizations -> "My Projects" and in the Manage -> "My Projects" it's grayed out so I assume I have some read-only permissions.

I don't see any credential in Jenkins related to pypi

[ahartikainen]

Grayed out button means you have maintainer role (similar to me).

Then we would need to find out who behind the CmdStanPy user.

[serban-nicusor-toptal]

I think the only option would be to contact the admins at admin@pypi.org with proof of who we are and that we own cmdstanpy and ask if they can at least point us in the right direction with what email is the owner using or similar information.

[cdc-mitzimorris]

I think that in the beginning Sean Talts might have helped set up PyPi. OTOH, maybe my email would work?
I have a file which has a PyPi password in it. not including it in this issue, but I thought that I've long since handed things off to Nick and Brian.

[WardBrian]

@cdc-mitzimorris helped me get the transfer done, so we can now set up the trusted publishing (#818)