Revert "Revert "Deployment using trusted publishers""

This reverts commit 5cab68a.

.github/workflows/test_and_deploy.yml

@@ -68,28 +68,37 @@ jobs:
         uses: codecov/codecov-action@v1
 
   deploy:
-    # this will run when you have tagged a commit, starting with "v*"
-    # and requires that you have put your twine API key in your 
-    # github secrets (see readme for details)
-    needs: [test]
+    name: Deploy
+    needs: test
+    if: success() && startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
-    if: contains(github.ref, 'tags')
+
+    permissions:
+        # IMPORTANT: this permission is mandatory for trusted publishing on PyPi
+        # see https://docs.pypi.org/trusted-publishers/
+        id-token: write
+        # This permission allows writing releases
+        contents: write
+
     steps:
-      - uses: actions/checkout@v2
-      - name: Set up Python
-        uses: actions/setup-python@v2
-        with:
-          python-version: "3.x"
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install -U setuptools setuptools_scm wheel twine
-      - name: Build and publish
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.TWINE_API_KEY }}
-        run: |
-          git tag
-          python setup.py sdist bdist_wheel
-          twine upload dist/*
+        - uses: actions/checkout@v4
+          with:
+              fetch-depth: 0
+
+        - name: 🐍 Set up Python
+          uses: actions/setup-python@v4
+          with:
+              python-version: 3.x
+
+        - name: 👷 Build
+          run: |
+              python -m pip install build
+              python -m build
+
+        - name: 🚢 Publish to PyPI
+          uses: pypa/gh-action-pypi-publish@release/v1
 
+        - uses: softprops/action-gh-release@v1
+          with:
+              generate_release_notes: true
+              files: ./dist/*