Merge pull request #42 from fonttools/use-trusted-publishing

Use trusted publishing

Author: anthrotype

.github/workflows/wheels.yml

@@ -54,6 +54,12 @@ jobs:
     # ... and all build jobs completed successfully
     needs: [build_wheels]
     runs-on: ubuntu-latest
+    environment:
+      name: publish-to-pypi
+      url: https://pypi.org/p/openstep-plist
+    permissions:
+      id-token: write # IMPORTANT: mandatory for trusted publishing.
+
     steps:
     - uses: actions/checkout@v4
       with:
@@ -101,9 +107,6 @@ jobs:
         draft: false
         prerelease: ${{ env.IS_PRERELEASE }}
     - name: Build and publish
-      env:
-        TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
       run: |
         if [ "$IS_PRERELEASE" == true ]; then
           echo "DEBUG: This is a pre-release"