Merge pull request #366 from starfy84/feat/trusted-publishing

feat: add crates.io trusted publishing support via OIDC

Author: EricCrosson

semantic-release-binary/action.yml

@@ -271,12 +271,17 @@ runs:
       working-directory: ${{ env.node_workdir }}
       shell: bash
 
+    - name: Authenticate with crates.io (Trusted Publishing)
+      if: inputs.cargo-registry-token == ''
+      id: crates-io-auth
+      uses: rust-lang/crates-io-auth-action@v1
+
     - run: |
         : semantic-release
         ${semantic_release}
       env:
         GITHUB_TOKEN: ${{ inputs.github_token }}
-        CARGO_REGISTRY_TOKEN: ${{ inputs.cargo-registry-token }}
+        CARGO_REGISTRY_TOKEN: ${{ steps.crates-io-auth.outputs.token || inputs.cargo-registry-token }}
       shell: bash
 
     - run: |

semantic-release-library/action.yml

@@ -179,10 +179,15 @@ runs:
       working-directory: ${{ env.node_workdir }}
       shell: bash
 
+    - name: Authenticate with crates.io (Trusted Publishing)
+      if: inputs.cargo-registry-token == ''
+      id: crates-io-auth
+      uses: rust-lang/crates-io-auth-action@v1
+
     - run: |
         : semantic-release
         ${semantic_release}
       env:
         GITHUB_TOKEN: ${{ inputs.github_token }}
-        CARGO_REGISTRY_TOKEN: ${{ inputs.cargo-registry-token }}
+        CARGO_REGISTRY_TOKEN: ${{ steps.crates-io-auth.outputs.token || inputs.cargo-registry-token }}
       shell: bash