automate pypi releases

[graingert]

Using https://github.com/pypa/gh-action-pypi-publish or similar.

Will need @flub to add a pypi key to github secrets

[flub]

Is the idea that anyone with write access can than publish by tagging a version? I wouldn't mind, if someone sets this up. Though I've also not seen much interest from other people to do maintenance work on pytest-timeout so not sure how necessary it is. Is there more precedent in the pytest (plugin) ecosystem for this?

[flub]

I'm still open to this if someone sets it up. It might speed up making releases as now every time I need to do a release I end up having to fight my own computer for a bit.

[aqeelat]

@flub I'll open a PR for this soon.

[RonnyPfannschmidt]

These days around oidc can be used instead of tokens, but that needs the pypi admin to configure the repo and permitted workflow

[flub]

These days around oidc can be used instead of tokens, but that needs the pypi admin to configure the repo and permitted workflow

i can do so if someone gives me instructions

[nicoddemus]

@flub see https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers, specially the "Using trusted publishing with GitHub Actions" (I cannot link directly to that section unfortunately).

[aqeelat]

@flub https://docs.pypi.org/trusted-publishers/adding-a-publisher/

[flub]

thanks for the links!