As above for lavavu-osmesa

.github/workflows/osmesa_deploy.yaml

@@ -47,18 +47,25 @@ jobs:
 
   upload_pypi:
     needs: [build_wheels]
+    name: Upload release to PyPI
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/lavavu
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
     steps:
-      - uses: actions/download-artifact@v2
+      - name: Retrieve wheels
+        uses: actions/download-artifact@v2
         with:
           name: artifact
           path: dist
 
-      - uses: pypa/gh-action-pypi-publish@master
-        with:
-          user: ${{ secrets.pypi_username }}
-          password: ${{ secrets.pypi_password }}
-          # To test: repository_url: https://test.pypi.org/legacy/
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        #Uncomment to use testing repo
+        #with:
+        #  repository-url: https://test.pypi.org/legacy/
 
   deploy_docker:
     needs: [upload_pypi] #Requires lavavu-osmesa package to be uploaded