Skip to content

Commit e87a7a0

Browse files
authored
Update publish workflow for trusted publishers (#1434)
1 parent e0c4a9d commit e87a7a0

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

.github/workflows/publish-release.yml

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ on:
1515
jobs:
1616
publish_release:
1717
runs-on: ubuntu-latest
18+
permissions:
19+
# This is useful if you want to use PyPI trusted publisher
20+
# and NPM provenance
21+
id-token: write
1822
steps:
1923
- uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1
2024

@@ -23,22 +27,17 @@ jobs:
2327
uses: jupyter-server/jupyter_releaser/.github/actions/populate-release@v2
2428
with:
2529
token: ${{ secrets.ADMIN_GITHUB_TOKEN }}
26-
target: ${{ github.event.inputs.target }}
2730
branch: ${{ github.event.inputs.branch }}
2831
release_url: ${{ github.event.inputs.release_url }}
2932
steps_to_skip: ${{ github.event.inputs.steps_to_skip }}
3033

3134
- name: Finalize Release
3235
id: finalize-release
3336
env:
34-
PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
35-
PYPI_TOKEN_MAP: ${{ secrets.PYPI_TOKEN_MAP }}
36-
TWINE_USERNAME: __token__
3737
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
38-
uses: jupyter-server/jupyter-releaser/.github/actions/finalize-release@v2
38+
uses: jupyter-server/jupyter_releaser/.github/actions/finalize-release@v2
3939
with:
4040
token: ${{ secrets.ADMIN_GITHUB_TOKEN }}
41-
target: ${{ github.event.inputs.target }}
4241
release_url: ${{ steps.populate-release.outputs.release_url }}
4342

4443
- name: '** Next Step **'

0 commit comments

Comments
 (0)