actions: Trusted Publishing

Author: sator-imaging

.github/workflows/nuget-publish.yml

@@ -6,6 +6,9 @@ on:
 jobs:
   publish:
 
+    permissions:
+      id-token: write  # enable GitHub OIDC token issuance for this job
+
     runs-on: ubuntu-latest
 
     steps:
@@ -40,25 +43,31 @@ jobs:
 
     ################################
     #  NUGET
+    - name: Trusted Publishing (id-token permission required)
+      uses: NuGet/login@v1
+      id: login  # --> ${{ steps.login.outputs.NUGET_API_KEY }}
+      with:
+        user: ${{ secrets.NUGET_LOGIN }}
+
     - name: NuGet Publish
       run: |
         cd ./directives
         dotnet nuget push "bin/Release/*.nupkg"  \
-          -k ${{ secrets.NUGET_API_KEY }}  \
+          -k ${{ steps.login.outputs.NUGET_API_KEY }}  \
           -s https://api.nuget.org/v3/index.json \
           --timeout 60
         cd ..
 
         cd ./src
         dotnet nuget push "bin/Release/*.nupkg"  \
-          -k ${{ secrets.NUGET_API_KEY }}  \
+          -k ${{ steps.login.outputs.NUGET_API_KEY }}  \
           -s https://api.nuget.org/v3/index.json \
           --timeout 60
         cd ..
 
         cd ./cli
         dotnet nuget push "bin/Release/*.nupkg"  \
-          -k ${{ secrets.NUGET_API_KEY }}  \
+          -k ${{ steps.login.outputs.NUGET_API_KEY }}  \
           -s https://api.nuget.org/v3/index.json \
           --timeout 60
         cd ..

Directory.Build.props

@@ -5,7 +5,7 @@
   </PropertyGroup>
 
   <PropertyGroup Label="NuGetPublishSettings">
-    <NuGetPublishVersion>1.0.1</NuGetPublishVersion>
+    <NuGetPublishVersion>1.0.2</NuGetPublishVersion>
     <NuGetPublishVersionSuffix></NuGetPublishVersionSuffix>
     <!-- relative path from .csproj files, without trailing slash -->
     <NuGetPublishProjectRootRelPath>..</NuGetPublishProjectRootRelPath>

src/FUnit.csproj

@@ -19,7 +19,7 @@
     </None>
   </ItemGroup>
   <ItemGroup>
-    <PackageReference Include="SatorImaging.Jsonable" Version="1.2.1">
+    <PackageReference Include="SatorImaging.Jsonable" Version="1.2.2">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>