ci: Update actions

.github/workflows/default.yml

@@ -6,16 +6,16 @@ jobs:
 
   sdist:
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
     - name: Checkout
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         lfs: true
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
-        python-version: '3.11'
+        python-version: '3.12'
     - name: Install dependencies
       run: |
         python -m pip install -U pip setuptools wheel
@@ -24,9 +24,9 @@ jobs:
         python setup.py sdist
         ls -lh dist
     - name: Upload artifacts
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
-        name: dist
+        name: dist-src
         path: dist
 
 
@@ -37,8 +37,8 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-20.04]
-        pyver: [cp311-cp311]
+        os: [ubuntu-22.04]
+        pyver: [cp312-cp312]
         arch: [x86_64, aarch64]
 
     env:
@@ -47,13 +47,13 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         lfs: true
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
-        python-version: '3.11'
+        python-version: '3.12'
     - name: Set up QEMU
       id: qemu
       uses: docker/setup-qemu-action@v2
@@ -91,34 +91,26 @@ jobs:
     - name: Upload artifacts
       uses: actions/upload-artifact@v2
       with:
-        name: dist
+        name: dist-${{ matrix.os }}-${{ matrix.pyver }}-${{ matrix.arch }}
         path: dist
 
 
   publish:
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
     needs: [sdist, bdist_wheel]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
+    environment:
+      name: deploy-to-pypi
+      url: https://pypi.org/p/backend.ai-krunner-alpine
+    permissions:
+      id-token: write
     steps:
-    - uses: actions/checkout@v3
-      with:
-        lfs: true
-    - name: Set up Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: '3.11'
-    - name: Install dependencies
-      run: |
-        python -m pip install -U pip setuptools wheel
-        python -m pip install -U twine
     - name: Download distributions
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@v4
       with:
-        name: dist
+        pattern: dist-*
+        merge-multiple: true
         path: dist
-    - name: Publish
-      env:
-        TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-      run: |
-        twine upload dist/*
+    - name: >-
+        Publish 🐍📦 to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1