ci(github): publish releases with pypa/gh-action-pypi-publish

Author: Copilot

.github/workflows/dev_release_esptool_pypi.yml

@@ -14,6 +14,13 @@ jobs:
 
     if: startsWith(github.ref, 'refs/tags/') && contains(github.ref_name, 'dev')
 
+    environment:
+      name: pypi
+      url: https://pypi.org/p/esptool
+
+    permissions:
+      id-token: write
+
     steps:
     - uses: actions/checkout@master
     - name: Set up Python 3.13
@@ -23,18 +30,15 @@ jobs:
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        python -m pip install twine build
+        python -m pip install build
 
     - name: Create development release ${{ github.ref_name }}
-      env:
-        TWINE_USERNAME: __token__
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        TWINE_NON_INTERACTIVE: true
       run: |
         python ci/patch_dev_release.py --version ${{ github.ref_name }} esptool/__init__.py
         git diff
-        python -m pip download esptool==$(python setup.py -V) && echo "Version ${{ github.ref_name }} already published, skipping..." && exit 1
-
-        echo "Packaging and publishing new esptool development release: ${{ github.ref_name }}"
+        echo "Packaging esptool development release: ${{ github.ref_name }}"
         python -m build --sdist
-        twine upload dist/*
+    - name: Publish package to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      with:
+        skip-existing: true

.github/workflows/release_esptool_pypi.yml

@@ -11,6 +11,13 @@ jobs:
 
     runs-on: ubuntu-latest
 
+    environment:
+      name: pypi
+      url: https://pypi.org/p/esptool
+
+    permissions:
+      id-token: write
+
     steps:
     - uses: actions/checkout@master
     - name: Set up Python 3.13
@@ -20,20 +27,12 @@ jobs:
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        pip install twine build
-    - name: Build and upload esptool ${{ github.event.release.tag_name }}
-      env:
-        TWINE_USERNAME: __token__
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
+        pip install build
+    - name: Build esptool ${{ github.event.release.tag_name }}
       run: |
-        PUBLISHED_VERSION=$(curl https://pypi.org/pypi/esptool/json 2>/dev/null | jq -r '.info.version')
-        CURRENT_VERSION=$(python setup.py --version 2>/dev/null)
-
-        if [ "$PUBLISHED_VERSION" == "$CURRENT_VERSION" ]; then
-          echo "Version ${PUBLISHED_VERSION} already published, skipping..."
-          exit 1
-        else
-          echo "Packaging and publishing new esptool version: ${CURRENT_VERSION}"
-          python -m build --sdist
-          twine upload dist/*
-        fi
+        echo "Packaging esptool version: $(python setup.py --version 2>/dev/null)"
+        python -m build --sdist
+    - name: Publish package to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      with:
+        skip-existing: true