CI maintenance (#133)

* Update actions, configure PyPi trusted publishing and remove unneeded dev dependencies

* Bump version to 0.15.1

Author: berendkleinhaneveld

.github/workflows/ci.yml

@@ -15,9 +15,9 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v6
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
@@ -49,9 +49,9 @@ jobs:
           - name: Linux py314
             pyversion: "3.14"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v6
       - name: Set up Python ${{ matrix.pyversion }}
         uses: actions/setup-python@v5
         with:
@@ -73,19 +73,19 @@ jobs:
     name: Build and test wheel
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
           python-version-file: "pyproject.toml"
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v6
       - name: Install dependencies
         run: uv sync
       - name: Build wheel
         run: uv build
       - name: Twine check
-        run: uv run twine check dist/*
+        run: uvx twine check dist/*
       - name: Upload wheel artifact
         uses: actions/upload-artifact@v4
         with:
@@ -97,8 +97,14 @@ jobs:
     runs-on: ubuntu-latest
     needs: [lint, test, build]
     if: success() && startsWith(github.ref, 'refs/tags/v')
+    environment:
+      name: pypi
+      url: https://pypi.org/p/observ
+    permissions:
+      id-token: write
+      contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Download wheel artifact
         uses: actions/download-artifact@v4
         with:
@@ -115,6 +121,3 @@ jobs:
           prerelease: false
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_PASSWORD }}

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "observ"
-version = "0.15.0"
+version = "0.15.1"
 description = "Reactive state management for Python"
 authors = [
     { name = "Korijn van Golen", email = "korijn@gmail.com" },
@@ -22,8 +22,6 @@ dev = [
     "pytest-benchmark",
     "pytest-cov",
     "pytest-timeout",
-    "twine",
-    "urllib3 ; python_version < '4'",
 ]
 ruff = ["ruff"]
 qt = [