ci: enable trusted publishing

See https://crates.io/docs/trusted-publishing

Author: martinohmann

.github/workflows/release-plz.yml

@@ -14,6 +14,9 @@ jobs:
   release-plz:
     name: Release-plz
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
     if: ${{ github.repository_owner == 'martinohmann' }}
     steps:
       - name: Checkout repository
@@ -24,8 +27,12 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
 
+      - name: Crates.io Auth
+        uses: rust-lang/crates-io-auth-action@e919bc7605cde86df457cf5b93c5e103838bd879 # v1
+        id: auth
+
       - name: Run release-plz
         uses: MarcoIeni/release-plz-action@8e91c71a60327f76b30233d17e3cabb316522e8f # v0.5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}

Cargo.toml

@@ -15,7 +15,7 @@ exclude = [
 ]
 
 [dependencies]
-jiff = "0.2.10"
+jiff = "0.2.15"
 
 [dev-dependencies]
 pretty_assertions = "1.4.1"