Update publish-to-pypi.yml

Author: jagdeep sidhu

.github/workflows/publish-to-pypi.yml

@@ -9,7 +9,7 @@ on:
 
 permissions:
   contents: read
-  # id-token: write # No longer needed when using API tokens
+  # id-token: write # Not needed when using API tokens
 
 jobs:
   build:
@@ -21,7 +21,7 @@ jobs:
     - name: Set up Python
       uses: actions/setup-python@v5
       with:
-        python-version: '3.x' # Use a version compatible with requires-python
+        python-version: '3.x'
 
     - name: Install PEP 517 build dependencies
       run: >-
@@ -41,14 +41,18 @@ jobs:
     - name: Inspect Wheel Metadata
       run: |
         WHEEL_FILE=$(find dist/ -name '*.whl')
+        echo "--- METADATA from $WHEEL_FILE ---"
         unzip -p "$WHEEL_FILE" "*.dist-info/METADATA" || echo "METADATA file not found in wheel"
+        echo "-----------------------------------"
 
     # Inspect the PKG-INFO file within the generated sdist (tar.gz)
     - name: Inspect Sdist PKG-INFO
       run: |
         SDIST_FILE=$(find dist/ -name '*.tar.gz')
+        echo "--- PKG-INFO from $SDIST_FILE ---"
         # Extract only the PKG-INFO file to stdout
         tar -xOzf "$SDIST_FILE" "*/PKG-INFO" 2>/dev/null || echo "PKG-INFO file not found in sdist"
+        echo "----------------------------------"
 
     - name: Store the distribution packages
       uses: actions/upload-artifact@v4
@@ -60,11 +64,11 @@ jobs:
     name: Publish to TestPyPI
     needs: build
     runs-on: ubuntu-latest
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main' # Publish to TestPyPI on pushes to main
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
     environment:
       name: testpypi
-      url: https://test.pypi.org/p/syscoin-address-converter # Optional: link to TestPyPI project
+      url: https://test.pypi.org/p/syscoin-address-converter
 
     steps:
     - name: Download all the dists
@@ -73,23 +77,24 @@ jobs:
         name: python-package-distributions
         path: dist/
 
+    - name: Install twine
+      run: python -m pip install twine
+
     - name: Publish distribution to TestPyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        repository-url: https://test.pypi.org/legacy/
-        # Use trusted publishing (recommended) - OIDC is likely default
-        # Alternatively, use a token:
-        password: ${{ secrets.TEST_PYPI_API_TOKEN }}
+      env:
+        TWINE_USERNAME: __token__
+        TWINE_PASSWORD: ${{ secrets.TEST_PYPI_API_TOKEN }}
+      run: python -m twine upload --repository-url https://test.pypi.org/legacy/ dist/*
 
   publish-to-pypi:
     name: Publish to PyPI
     needs: build
     runs-on: ubuntu-latest
-    if: github.event_name == 'release' && github.event.action == 'published' # Publish to PyPI on release
+    if: github.event_name == 'release' && github.event.action == 'published'
 
     environment:
       name: pypi
-      url: https://pypi.org/p/syscoin-address-converter # Optional: link to PyPI project
+      url: https://pypi.org/p/syscoin-address-converter
 
     steps:
     - name: Download all the dists
@@ -98,11 +103,11 @@ jobs:
         name: python-package-distributions
         path: dist/
 
+    - name: Install twine
+      run: python -m pip install twine
+
     - name: Publish distribution to PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-      # Use trusted publishing (recommended)
-      # Requires configuring trusted publishers in PyPI project settings
-      # https://docs.pypi.org/trusted-publishers/
-      # Alternatively, use a token:
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }} 
+      env:
+        TWINE_USERNAME: __token__
+        TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+      run: python -m twine upload dist/*