Add supports PyPI's trusted publishing implementation (#596)

.github/workflows/codeql_analysis.yml

@@ -1,5 +1,9 @@
 name: "CodeQL"
 
+concurrency:
+  group: codeql
+  cancel-in-progress: true
+
 on:
   push:
     branches: ["master"]

.github/workflows/on_update.yml

@@ -1,5 +1,9 @@
 name: On update
 
+concurrency:
+  group: development
+  cancel-in-progress: true
+
 on:
   push:
     branches-ignore:

.github/workflows/pre_release.yml

@@ -1,5 +1,7 @@
 name: Build and publish pre release
 
+concurrency: staging
+
 on:
   push:
     branches:
@@ -177,8 +179,10 @@ jobs:
     name: Publish to TestPyPI
     needs: [build, build-wheels]
     runs-on: ${{ matrix.platform }}
+    environment: staging
     permissions:
       contents: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -212,8 +216,6 @@ jobs:
       continue-on-error: true
       uses: pypa/[email protected]
       with:
-        user: __token__
-        password: ${{ secrets.TEST_PYPI_API_TOKEN }}
         repository-url: https://test.pypi.org/legacy/
         packages-dir: dist-${{ matrix.platform }}-${{ matrix.python-version }}/
         skip-existing: true

.github/workflows/release.yml

@@ -1,5 +1,7 @@
 name: Build and publish release
 
+concurrency: production
+
 on:
   push:
     tags:
@@ -77,8 +79,10 @@ jobs:
     name: Publish to PyPI and generate GitHub release ${{ github.ref_name }}
     needs: [build, build-wheels]
     runs-on: ${{ matrix.platform }}
+    environment: production
     permissions:
       contents: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -111,8 +115,6 @@ jobs:
     - name: Publish distribution to PyPI
       uses: pypa/[email protected]
       with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
         packages-dir: dist-${{ matrix.platform }}-${{ matrix.python-version }}/
     - name: Create GitHub Release
       id: create_release

.github/workflows/tests.yml

@@ -1,5 +1,9 @@
 name: Tests [Docker]
 
+concurrency:
+  group: testing
+  cancel-in-progress: true
+
 on:
   push:
     branches:

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "Flask-JSONRPC"
-version = "4.0.0a5"
+version = "4.0.0a7"
 description = "Adds JSONRPC support to Flask."
 readme = {file = "README.md", content-type = "text/markdown"}
 license = {file = "LICENSE.txt"}