Merge pull request #2333 from theupdateframework/dependabot/github_actions/pypa/gh-action-pypi-publish-1.8.1

build(deps): bump pypa/gh-action-pypi-publish from 1.7.1 to 1.8.1
This commit is contained in:
Jussi Kukkonen 2023-03-20 10:22:49 +02:00 committed by GitHub
commit 73dae65e23
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -102,7 +102,7 @@ jobs:
- name: Publish binary wheel and source tarball on PyPI
# Only attempt pypi upload in upstream repository
if: github.repository == 'theupdateframework/python-tuf'
uses: pypa/gh-action-pypi-publish@22b4d1f12511f2696162c08546dafbaa903448a2
uses: pypa/gh-action-pypi-publish@a3a3bafbb3e5a75a854ae1bc53ae128cf22c4af4
with:
user: __token__
password: ${{ secrets.PYPI_API_TOKEN }}