Update the GHA release workflow with trusted publisher enabled (#614)

* Add GitHub action for opensearch-py release

Signed-off-by: Zelin Hao <zelinhao@amazon.com>

* Generate GitHub release at the end

Signed-off-by: Zelin Hao <zelinhao@amazon.com>

* Update CHANGELOG

Signed-off-by: Zelin Hao <zelinhao@amazon.com>

* Update CHANGELOG

Signed-off-by: Zelin Hao <zelinhao@amazon.com>

---------

Signed-off-by: Zelin Hao <zelinhao@amazon.com>

.github/workflows/release-drafter.yml

@@ -32,11 +32,33 @@ jobs:
       - name: Build project for distribution
         run: |
           python -m build
+      - name: upload windows dists
+        uses: actions/upload-artifact@v3
+        with:
+          name: release-dists
+          path: dist/
+
+  pypi-publish:
+    runs-on: ubuntu-latest
+    needs:
+      - draft-a-release
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - name: Retrieve release distributions
+        uses: actions/download-artifact@v3
+        with:
+          name: release-dists
+          path: dist
+      - name: Generate the artifacts
+        run: |
           tar -zvcf artifacts.tar.gz dist
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
       - name: Release
         uses: softprops/action-gh-release@v1
         with:
-          draft: true
           generate_release_notes: true
           files: |
             artifacts.tar.gz

CHANGELOG.md

@@ -6,6 +6,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Added pylint `line-too-long` and `invalid-name` ([#590](https://github.com/opensearch-project/opensearch-py/pull/590))
 - Added pylint `pointless-statement` ([#611](https://github.com/opensearch-project/opensearch-py/pull/611))
 - Added a log collection guide ([#579](https://github.com/opensearch-project/opensearch-py/pull/579))
+- Added GHA release ([#614](https://github.com/opensearch-project/opensearch-py/pull/614))
 ### Changed
 ### Deprecated
 ### Removed