chore: trusted publishing (#795)

fixes #794 --------- Signed-off-by: Jan Kowalleck <[email protected]> Signed-off-by: semantic-release <[email protected]> Co-authored-by: semantic-release <[email protected]>
CycloneDX · Sep 23, 2024 · 721f12d · 721f12d
1 parent bee34c0
commit 721f12d
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -126,7 +126,7 @@ jobs:
         # see https://github.com/pypa/gh-action-pypi-publish
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.PYPI_TOKEN }}
+          attestations: true
       - name: Publish package distributions to GitHub Releases
         if: |
           !failure() && !cancelled() &&

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,15 @@
 
 
 
+## v4.6.1-alpha.1 (2024-09-23)
+
+### Chore
+
+* chore: trusted publishing
+
+Signed-off-by: Jan Kowalleck &lt;[email protected]&gt; ([`07b5e83`](https://github.com/CycloneDX/cyclonedx-python/commit/07b5e83c18fd3c02f917bca1faa00d42e6665647))
+
+
 ## v4.6.0 (2024-09-20)
 
 ### Documentation

diff --git a/cyclonedx_py/__init__.py b/cyclonedx_py/__init__.py
@@ -17,7 +17,7 @@
 
 # !! version is managed by `semantic_release`
 # do not use typing here, or else `semantic_release` might have issues finding the variable
-__version__ = "4.6.0"  # noqa:Q000
+__version__ = "4.6.1-alpha.1"  # noqa:Q000
 
 # There is no stable/public API.
 # However, you might call the stable CLI instead, like so:

diff --git a/docs/conf.py b/docs/conf.py
@@ -22,7 +22,7 @@
 
 # The full version, including alpha/beta/rc tags
 # !! version is managed by semantic_release
-release = "4.6.0"
+release = "4.6.1-alpha.1"
 
 # -- General configuration ---------------------------------------------------
 

diff --git a/pyproject.toml b/pyproject.toml
@@ -7,7 +7,7 @@ build-backend = "poetry.core.masonry.api"
 [tool.poetry]
 # keep in sync with `cyclonedx_py/_internal/utils/cdx.py`
 name = "cyclonedx-bom"
-version = "4.6.0"
+version = "4.6.1-alpha.1"
 description = "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments"
 authors = [
   "Jan Kowalleck <[email protected]>",