release: remove PyPI token from CD to force trusted publishers #48

	name: CD

	on:
	workflow_dispatch:
	push:
	branches:
	- "main"

	jobs:
	release:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	with:
	fetch-depth: 0

	- name: Get version from file
	run: \|
	VERSION_FILE="$/helx_base/_version.py"
	HELX_VERSION="$(cat helx_base/_version.py \| grep '__version__ = ' \| cut -d'=' -f2 \| sed 's,\",,g' \| sed "s,\',,g" \| sed 's, ,,g')"
	echo "Current version is:"
	echo "$HELX_VERSION"

	echo "HELX_VERSION=$HELX_VERSION" >> $GITHUB_ENV

	- name: Create changelog and push tag
	id: changelog
	uses: TriPSs/conventional-changelog-action@v3
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	output-file: false
	fallback-version: ${{ env.HELX_VERSION }}
	skip-commit: true

	- name: Create Release
	uses: ncipollo/release-action@v1
	with:
	tag: ${{ env.HELX_VERSION }}
	name: "HELX release v${{ env.HELX_VERSION }}"
	body: ${{ steps.changelog.outputs.clean_changelog }}

	- uses: actions/setup-python@v4
	with:
	python-version: '3.10'

	- name: Install pypa/build
	run: \|
	python -m pip install build

	- name: Build wheel and sdist
	run: \|
	python -m build --sdist --wheel --outdir dist/ .

	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	verbose: true

Provide feedback