From 6c6695d8f9b086bc8b3afea36f51b9079a1a13ed Mon Sep 17 00:00:00 2001
From: mrbean-bremen <hansemrbean@googlemail.com>
Date: Thu, 24 Oct 2024 18:56:42 +0200
Subject: [PATCH] Use trusted publisher for release

 - see https://docs.pypi.org/trusted-publishers/
---
 .github/workflows/release-deploy.yml |  6 +++---
 CHANGELOG.md                         | 11 ++++++++---
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/release-deploy.yml b/.github/workflows/release-deploy.yml
index facda27..07414de 100644
--- a/.github/workflows/release-deploy.yml
+++ b/.github/workflows/release-deploy.yml
@@ -8,6 +8,9 @@ jobs:
 
   deploy:
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
     strategy:
       fail-fast: true
       matrix:
@@ -29,6 +32,3 @@ jobs:
 
     - name: Publish package to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9bb475c..d6f411e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # pytest-order Release Notes
 
+## Unreleased
+
+### Infrastructure
+* use trusted publisher for release (see https://docs.pypi.org/trusted-publishers/)
+
 ## [Version 1.3.0](https://pypi.org/project/pytest-order/1.3.0/) (2024-08-22)
 Allows to fail tests that cannot be ordered.
 
@@ -7,17 +12,17 @@ Allows to fail tests that cannot be ordered.
 - added option `--error-on-failed-ordering` to make tests that cannot be ordered fail
   (see [#140](https://github.com/pytest-dev/pytest-order/issues/140))
 
-## Infrastructure
+### Infrastructure
 - added missing documentation examples, structured examples according to documentation structure
 
 ## [Version 1.2.1](https://pypi.org/project/pytest-order/1.2.1/) (2024-04-02)
 Bugfix release.
 
-## Fixes
+### Fixes
 - handle dependency markers with the same alias name (see [#71](https://github.com/pytest-dev/pytest-order/issues/71))
 - specify rootdir to recursive pytest calls to avoid searching a large directory tree unnecessarily (see [#110](https://github.com/pytest-dev/pytest-order/issues/110))
 
-## Infrastructure
+### Infrastructure
 - avoid unknown marker warning in tests (see [#101](https://github.com/pytest-dev/pytest-order/issues/101))
 - added pytest 8 to CI tests