Enable trusted publishing.

Author: icemac

.github/workflows/tests.yml

@@ -93,3 +93,35 @@ jobs:
         name: zope.testing.tar.gz
         path: dist/*gz
 
+  publish:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    # Only publish on tag pushes
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
+    # Wait for build jobs to complete
+    needs: [build]
+    environment:
+      name: pypi
+      url: https://pypi.org/p/zope.testing
+    permissions:
+      contents: read
+      id-token: write  # Mandatory for trusted publishing
+
+    steps:
+      - name: Download package artifacts
+        uses: actions/download-artifact@v8
+        with:
+          path: dist/
+          pattern: '*'
+          merge-multiple: true
+
+      - name: Display structure of downloaded files
+        run: |
+          ls -lR dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true
+          packages-dir: dist/
+          verbose: true

.meta.toml

@@ -39,3 +39,6 @@ additional-config = [
 additional-ignores = [
     "docs/_build/html/_sources/api/*",
     ]
+
+[pypi]
+trusted-publishing = true

pyproject.toml

@@ -91,3 +91,8 @@ directory = "parts/htmlcov"
 [tool.setuptools.dynamic]
 readme = {file = ["README.rst", "CHANGES.rst"]}
 
+
+
+[tool.zest-releaser]
+create-wheel = false
+upload-pypi = false