From d12bb27f10536889c37d753b306cfdf3531277ee Mon Sep 17 00:00:00 2001
From: Doug Ransom <doug.ransom@gmail.com>
Date: Sun, 8 Oct 2023 10:34:52 -0700
Subject: [PATCH] updated publish script

---
 .github/workflows/python-publish.yml | 18 +++++++-----------
 1 file changed, 7 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index f14c090..9110a34 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -5,7 +5,7 @@ on:
 
 permissions:
   contents: read
-
+  id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
 jobs:
   build_and_publish:
     # Set up the environment `CI` references the secret `PYPI_API_TOKEN` in repository settings
@@ -16,14 +16,10 @@ jobs:
     - uses: actions/checkout@v2
     - name: Installing build Dependencies
       run: |
-          python -m pip install --upgrade pip
-          python -m pip install flit
-    - name: Building package with flit
-      run: |
-            flit build
-    - name: Publishing 📦 to Test PyPI
-     # Regarding building artifacts within Platform specific environment see https://github.com/pypa/gh-action-pypi-publish#non-goals
+        python -m pip install --upgrade pip
+        pip install build
+    - name: Build package
+      run: python -m build
+    - name: Publish package
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
-        repository-url: https://upload.pypi.org/legacy/
+