trusted publishing

Author: mrgrain

.github/workflows/release.yml

@@ -1,4 +1,4 @@
-import { cdk, JsonPatch } from "projen";
+import { cdk } from "projen";
 import { JsiiProjectOptions } from "projen/lib/cdk";
 import { NpmAccess } from "projen/lib/javascript";
 import { MergeQueue } from "./projenrc/merge-queue";
@@ -32,8 +32,9 @@ const project = new cdk.JsiiProject({
   },
   releaseEnvironment: "npm",
   npmAccess: NpmAccess.PUBLIC,
+  npmTrustedPublishing: true,
   publishToPypi: {
-    // trustedPublishing: true,
+    trustedPublishing: true,
     distName: "projen.canary-package",
     module: "projen.canary_package",
     githubEnvironment: "release",
@@ -53,24 +54,6 @@ new MergeQueue(project, {
   },
 });
 
-// remove npm token
-project.github?.tryFindWorkflow("release")?.file?.patch(
-  JsonPatch.remove("/jobs/release_npm/steps/9/env/NPM_TOKEN"),
-  JsonPatch.add("/jobs/release_npm/steps/9/env/NPM_TRUSTED_PUBLISHER", "true"),
-  JsonPatch.replace(
-    "/jobs/release_npm/steps/9/run",
-    "npx -p github:cdklabs/publib#mrgrain-patch-1 publib-npm",
-  ),
-
-  JsonPatch.replace("/jobs/release_pypi/steps/10/env", {
-    PYPI_TRUSTED_PUBLISHER: "true",
-  }),
-  JsonPatch.replace(
-    "/jobs/release_pypi/steps/10/run",
-    "npx -p github:cdklabs/publib#mrgrain-patch-1 publib-pypi",
-  ),
-);
-
 // fix java version
 // const javaVersion = "11";
 // project.github?.tryFindWorkflow("build")?.file?.patch(