fix: bump to 1.5.0 and use trusted publisher for PyPI

.github/workflows/py-deploy.yml

@@ -2,28 +2,30 @@ name: Python Publish Package
 
 on:
   push:
-    paths: "apitable.py/pyproject.toml"
     tags:
       - "apitable.py@*"
 
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
         with:
-          python-version: 3.10.12
+          python-version: "3.10"
       - name: Python Poetry
         uses: abatilo/actions-poetry@v2
         with:
-          working-directory: ./apitable.py
           poetry-version: 1.5.1
-      - name: Build and publish
-        env:
-          PYPI_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          PYPI_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
+      - name: Build
         run: |
           cd apitable.py
-          make install
-          poetry publish --username=$PYPI_USERNAME --password=$PYPI_PASSWORD --build
+          poetry lock --no-update
+          poetry install
+          poetry build
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: apitable.py/dist/

apitable.py/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "apitable"
-version = "1.4.2"
+version = "1.5.0"
 description = "APITable OpenAPI Python SDK"
 authors = ["APITable Ltd. <dev@apitable.com>"]
 readme = "README.md"