#12 Use OIDC publishing

.github/workflows/publish.yml

@@ -4,10 +4,6 @@ on:
   push:
     tags: [ '*.*.*' ]
 
-env:
-  PYTHON_REPOSITORY_USERNAME: ${{ secrets.PYTHON_REPOSITORY_USERNAME }}
-  PYTHON_REPOSITORY_PASSWORD: ${{ secrets.PYTHON_REPOSITORY_PASSWORD }}
-
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -16,17 +12,17 @@ jobs:
       contents: read
     steps:
       # Checkout project code
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       # Set up python environment
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@v3
         with:
           python-version: '3.x'
 
-      # Install python poetry and dependencies for use in later steps
-      - name: Install Poetry
-        run: ./scripts/poetry.sh
+      # Re-run validation and build
+      - name: Validate
+        run: ./scripts/validate.sh
 
-      # Change working directory and run build script
-      - name: Publish
-        run: ./scripts/publish.sh
+      # Get pypi credentials and publish
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1