Switch to API token authentication for PyPI publishing

Author: yeldarby

.github/workflows/publish-release.yml

@@ -8,7 +8,6 @@ on:
 
 permissions:
   contents: read
-  id-token: write
 
 jobs:
   publish-release:
@@ -38,6 +37,8 @@ jobs:
           twine check --strict dist/*
 
       - name: 🚀 Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          attestations: true
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+        run: |
+          twine upload dist/*

.github/workflows/publish-testpypi.yml

@@ -0,0 +1,43 @@
+name: Publish rffickle to TestPyPI
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+    paths:
+      - 'setup.py'
+      - 'src/**'
+
+permissions:
+  contents: read
+
+jobs:
+  publish-test:
+    name: Publish Test Package
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: 📥 Checkout the repository
+        uses: actions/checkout@v4
+
+      - name: 🐍 Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+
+      - name: 📦 Install build dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install build twine
+
+      - name: 🏗️ Build source and wheel distributions
+        run: |
+          python -m build
+          twine check --strict dist/*
+
+      - name: 🚀 Publish to TestPyPI
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.TEST_PYPI_API_TOKEN }}
+        run: |
+          twine upload --repository testpypi dist/*