Update publish.yml to trusted publisher (#64)

.github/workflows/publish.yml

@@ -17,6 +17,8 @@ jobs:
     if: github.repository == 'ultralytics/thop'
     name: Publish
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # for PyPI trusted publishing
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -100,14 +102,13 @@ jobs:
         run: |
           curl -s "https://raw.githubusercontent.com/ultralytics/actions/main/utils/summarize_release.py" | python -
         shell: bash
+      - name: Build package
+        if: (github.event_name == 'push' || github.event.inputs.pypi == 'true') && steps.check_pypi.outputs.increment == 'True'
+        run: python -m build
       - name: Publish to PyPI
         continue-on-error: true
-        if: (github.event_name == 'push' || github.event.inputs.pypi == 'true')  && steps.check_pypi.outputs.increment == 'True'
-        env:
-          PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
-        run: |
-          python -m build
-          python -m twine upload dist/* -u __token__ -p $PYPI_TOKEN
+        if: (github.event_name == 'push' || github.event.inputs.pypi == 'true') && steps.check_pypi.outputs.increment == 'True'
+        uses: pypa/gh-action-pypi-publish@release/v1
       - name: Extract PR Details
         env:
           GH_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN || secrets.GITHUB_TOKEN }}

thop/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "2.0.8"
+__version__ = "2.0.9"
 
 
 import torch