Update PyPI publish with 2FA (#325)

* remove user/pass

* Update CHANGELOG.rst

* update email name

.github/workflows/deploy.yml

@@ -7,6 +7,8 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v3
       - name: Set up Python
@@ -17,18 +19,15 @@ jobs:
         run: |
           python --version
           python -m pip install --upgrade pip
-          pip install setuptools wheel twine
+          pip install setuptools wheel build
       - name: Test
         run: |
           pip install .[test]
           pytest --runslow ./tests
-      - name: Build and publish
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        run: |
-          python setup.py sdist bdist_wheel
-          twine upload dist/*
+      - name: Build
+        run: python -m build
+      - name: Publish
+        uses: pypa/gh-action-pypi-publish@release/v1
       - name: Send mail
         # Notify when cron job fails
         if: failure()
@@ -47,4 +46,4 @@ jobs:
           # comma-separated string, send email to
           to: uw_ihme_simulationscience@uw.edu
           # from email name
-          from: Dr Manhattan
+          from: Vivarium Notifications

CHANGELOG.rst

@@ -1,4 +1,9 @@
+**4.1.3 - 01/09/24**
+
+ - Update PyPI to 2FA with trusted publisher
+
 **4.1.2 - 10/16/23**
+
  - Drop support for python 3.8
 
 **4.1.1 - 07/13/23**