Investigate trusted publishing in crates.io

[liurenjie1024]

Is your feature request related to a problem or challenge?

crates.io recently added trusted publishing, which allows us to publish crates without storing credentials.

Describe the solution you'd like

No response

Willingness to contribute

I can contribute to this feature independently

[Xuanwo]

Cool!

[kevinjqliu]

i was just about to create this issue, good thing i double checked :)

[kevinjqliu]

Heres an example of using trusted publishing
clflushopt/tpchgen-rs@84d8101

Just requires some setup on the crates.io side, https://crates.io/crates/iceberg

[liurenjie1024]

Heres an example of using trusted publishing clflushopt/tpchgen-rs@84d8101

Just requires some setup on the crates.io side, https://crates.io/crates/iceberg

Thanks, I'll find time to implement this.

[github-actions]

This issue has been automatically marked as stale because it has been open for 180 days with no activity. It will be closed in next 14 days if no further activity occurs. To permanently prevent this issue from being considered stale, add the label 'not-stale', but commenting on the issue is preferred when possible.

[blackmwk]

I'll do it this week.

[dannycjones]

Hey @blackmwk, I was hoping to try this for the 0.10 release. I can work with the release manager to ensure the relevant setup, so long as they are onboard to try this migration.

Here's a PR updating the workflow: #2593

Remaining steps:

• Merge chore(ci): migrate to trusted publishing #2593
• On each crate, configure trusted publishing specifying the allowlisted GitHub repository and workflow file.
• After first successful release, remove crates.io token from GitHub repository secret.
• Revoke crates.io token.