IMO we should be using trusted publishing moving forward, which doesn't need PyPI secrets at all. DAYamlChecker uses it: https://github.com/SuffolkLITLab/DAYamlChecker/blob/main/.github/workflows/publish.yml LITLabTheme also just switched to it: https://github.com/SuffolkLITLab/docassemble-LITLabTheme/commit/8430066c9d80cfcd1e38d63296a177bc1fc4832f https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#configuring-trusted-publishing
IMO we should be using trusted publishing moving forward, which doesn't need PyPI secrets at all.
DAYamlChecker uses it: https://github.com/SuffolkLITLab/DAYamlChecker/blob/main/.github/workflows/publish.yml
LITLabTheme also just switched to it: SuffolkLITLab/docassemble-LITLabTheme@8430066
https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#configuring-trusted-publishing