CICD: modernize step for publishing to pypi, use trusted publisher workflow rather than username/pass

Author: phillipdupuis

.github/workflows/cicd.yml

@@ -60,26 +60,42 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: coverage.lcov
-  deploy:
-    name: Deploy to PyPi
+  build:
+    name: Build pydantic2ts for distribution
+    if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
     needs: test
     runs-on: ubuntu-latest
-    if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
     steps:
       - name: Check out repo
         uses: actions/checkout@v4
-      - name: Set up Python 3.9
-        uses: actions/setup-python@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
         with:
-          python-version: 3.9
-      - name: Install dependencies
-        run: |
-          python -m pip install -U pip wheel
-      - name: Build dist
-        run: |
-          python setup.py sdist bdist_wheel bdist_egg
-      - name: Publish package
-        uses: pypa/gh-action-pypi-publish@v1.5.0
+          version: "0.5.2"
+      - name: Install python 3.9
+        run: uv python install 3.9
+      - name: Build pydantic2ts
+        run: uv build
+      - name: Store the distribution
+        uses: actions/upload-artifact@v4
+        with:
+          name: pydantic2ts-dist
+          path: dist/
+  publish-to-pypi:
+    name: Publish pydantic2ts to PyPI
+    if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/pydantic-to-typescript
+    permissions:
+      id-token: write
+    steps:
+      - name: Download all the dists
+        uses: actions/download-artifact@v4
         with:
-          user: __token__
-          password: ${{ secrets.pypi_password }}
+          name: pydantic2ts-dist
+          path: dist/
+      - name: Publish distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1