Update Python release workflows to support PyPi trusted publishing

.bumpversion.toml

@@ -1,5 +1,5 @@
 [tool.bumpversion]
-current_version = "2.4.0"
+current_version = "2.3.0"
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<patch>\\d+)"
 serialize = ["{major}.{minor}.{patch}"]
 search = "{current_version}"

.github/workflows/release.yml

@@ -14,11 +14,37 @@ on:
       - README.md
 
 jobs:
-  release:
-    uses: opengood-ai/central-workflows/.github/workflows/python-py-pi-release.yml@main
+  release-build:
+    uses: opengood-ai/central-workflows/.github/workflows/python-release-build.yml@main
     with:
       git-email: ${{ vars.GIT_EMAIL }}
       git-user: ${{ vars.GIT_USER }}
     secrets:
-      py-pi-token: ${{ secrets.PY_PI_TOKEN }}
+      workflow-token: ${{ secrets.WORKFLOW_TOKEN }}
+
+  py-pi-release:
+    name: Python PyPI Release
+    needs: [ release-build ]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/${{ github.event.repository.name }}
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Download Distribution Packages
+        uses: actions/download-artifact@v8.0.1
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Publish Distribution Package
+        uses: pypa/gh-action-pypi-publish@v1.13.0
+        with:
+          verbose: true
+
+  release:
+    uses: opengood-ai/central-workflows/.github/workflows/python-release.yml@main
+    secrets:
       workflow-token: ${{ secrets.WORKFLOW_TOKEN }}

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "opengood.py_ml_plot"
-version = "2.4.0"
+version = "2.3.0"
 description = "Modules containing reusable functions for machine learning visualization plotting"
 authors = [
     { name = "OpenGood", email = "ai@opengood.ai" }
@@ -53,4 +53,3 @@ norecursedirs = [".git", ".tox", ".venv"]
 filterwarnings = "ignore::DeprecationWarning"
 log_cli = true
 log_cli_level = "INFO"
-