Merge pull request #17 from conda-incubator/update-gh-actions

add trusted publishers method

.github/workflows/build_and_deploy_release.yml

@@ -6,14 +6,15 @@ on:
     tags:        
       - 'v*'          
 jobs:
-
   call-build:
     uses: conda-incubator/jupyterlab-conda-store/.github/workflows/build.yml@main
 
   deploy-build:
     runs-on: ubuntu-latest
     if: always() # Runs despite playwright tests failing
     needs: call-build
+    permissions:
+      id-token: write
 
     steps:
     - name: Checkout
@@ -25,14 +26,5 @@ jobs:
         name: extension-artifacts
         path: dist/
 
-    - name: Upload to pypi
-      run: |
-        set -eux
-        pip install twine
-        twine upload -r pypi dist/*
-      env:
-        TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-        TWINE_PASSWORD:  ${{ secrets.PYPI_PASSWORD }}
-
-
-
+    - name: Upload to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1