Merge pull request #174 from jschlyter/pypa_update

Use modern pypi publishing tool

Author: jschlyter

.github/workflows/release.yml

@@ -8,12 +8,17 @@ jobs:
   pypi_release:
     name: Build with Poetry and Publish to PyPI
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/cryptojwt
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
       - name: Install and configure Poetry
-        run: |
-          pip install poetry
-          poetry config pypi-token.pypi "${{ secrets.PYPI_TOKEN }}"
+        run: pip install poetry
       - name: Publish package
-        run: poetry publish --build
+        run: poetry build
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1