PyPi is moving to trusted publisher model, which I've configured for our repo, and needs some changes on the workflow. This would create a short lived token for the task.
It's now also strongly recommended that deployments use a separate environment on github, and I've configured that as well.
This PR can only be tested once merged, so I'm going to merge it to see how it behaves and if it works.
PyPi is moving to trusted publisher model, which I've configured for our repo, and needs some changes on the workflow. This would create a short lived token for the task.
It's now also strongly recommended that deployments use a separate environment on github, and I've configured that as well.
This PR can only be tested once merged, so I'm going to merge it to see how it behaves and if it works.