Update pypi

.github/workflows/pypi.yaml

@@ -1,11 +1,14 @@
-name: Upload to PyPI
+name: Publish
 
 on:
   release:
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
-  upload:
+  build:
     runs-on: ubuntu-latest
 
     steps:
@@ -14,27 +17,50 @@ jobs:
         with:
           fetch-depth: 0
           fetch-tags: true
+          persist-credentials: false
 
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
       - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install build twine
+        run: python -m pip install build
 
       - name: Build distribution
         run: python -m build
 
-      - name: Publish to PyPI Test
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_TEST_TOKEN }}
-        run: twine upload --verbose --repository testpypi dist/*
+      - uses: actions/upload-artifact@v5
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+
+  testpypi:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: testpypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v6
+        with:
+          name: dist
+          path: dist/
+      - name: Publish to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
 
+  pypi:
+    needs: testpypi
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v6
+        with:
+          name: dist
+          path: dist/
       - name: Publish to PyPI
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
-        run: twine upload --verbose --repository pypi dist/*
+        uses: pypa/gh-action-pypi-publish@release/v1

arango/version.py

@@ -1 +1 @@
-__version__ = "8.3.5"
+__version__ = "8.3.6"