add trusted PyPI publisher, etc. (#508)

Author: jGaboardi

.github/workflows/release_and_publish.yml

@@ -12,7 +12,11 @@ on:
         required: false
 jobs:
   build:
+    name: Create release & publish to PyPI
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # MANDATORY for trusted publishing to PyPI
+      contents: write  # MANDATORY for the Github release action
     steps:
       - name: Checkout repo
         uses: actions/checkout@v6
@@ -39,6 +43,3 @@ jobs:
             });
       - name: Publish distribution 📦 to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.pypi_password }}

environment.yml

@@ -2,7 +2,7 @@ name: spopt
 channels:
   - conda-forge
 dependencies:
-  - python=3.13
+  - python=3.14
   - fast_hdbscan
   - geopandas
   - jupyterlab

pyproject.toml

@@ -54,7 +54,10 @@ tests = [
     "pytest-cov",
     "pytest-xdist",
 ]
-dev = ["pre-commit", "ruff"]
+dev = [
+    "pre-commit",
+    "ruff",
+]
 docs = [
     "nbsphinx",
     "numpydoc",
@@ -79,7 +82,6 @@ sa3 = [
     "numba",
 ]
 
-
 [tool.setuptools.packages.find]
 include = ["spopt", "spopt.*"]