use trusted publishing

pallets · Jan 10, 2024 · da703f7 · da703f7
1 parent bce1746
commit da703f7
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -60,11 +60,10 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
- # Try uploading to Test PyPI first, in case something fails.
- - uses: pypa/gh-action-pypi-publish@c7f29f7adef1a245bd91520e94867e5c6eedddcc
+ - uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf
  with:
  repository_url: https://test.pypi.org/legacy/
  packages_dir: artifact/
- - uses: pypa/gh-action-pypi-publish@c7f29f7adef1a245bd91520e94867e5c6eedddcc
+ - uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf
  with:
  packages_dir: artifact/