From bddadd0cf8c8d6ca4b849a062f5b95c7f4599d55 Mon Sep 17 00:00:00 2001
From: Thomas Kam <thomassth@users.noreply.github.com>
Date: Mon, 6 Nov 2023 23:21:52 -0500
Subject: [PATCH] pipeline update

---
 .github/workflows/dart.yml       |  2 --
 .github/workflows/prerelease.yml | 11 ++++-------
 .github/workflows/release.yml    | 11 ++++-------
 3 files changed, 8 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/dart.yml b/.github/workflows/dart.yml
index e839df99..744c0ba4 100644
--- a/.github/workflows/dart.yml
+++ b/.github/workflows/dart.yml
@@ -37,8 +37,6 @@ jobs:
     runs-on: macos-13
     steps:
       - uses: maxim-lobanov/setup-xcode@v1
-        with:
-          xcode-version: '15.0-beta'
       - uses: actions/checkout@v2
       - uses: actions/setup-java@v1
         with:
diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index b836df6a..a08733c0 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -17,6 +17,8 @@ jobs:
     name: Development Release
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for authentication using OIDC
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
@@ -36,15 +38,10 @@ jobs:
         run: |
           sed -i "0,/\#\# \[.*/s//## [${{steps.changelog_reader.outputs.version}}-$GITHUB_RUN_ID]/" CHANGELOG.md
           cat CHANGELOG.md
-      - name: Setup credentials
-        run: |
-          cat <<EOF > $PUB_CACHE/credentials.json
-          ${{ secrets.CREDENTIALS }}
-          EOF
       - name: Publish package
-        run: flutter pub publish --force
+        uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1
       - name: Add entry to Github release
         uses: softprops/action-gh-release@v1
         with:
           tag_name: ${{ steps.changelog_reader.outputs.version }}+${{ github.run_id }}
-          prerelease: true
\ No newline at end of file
+          prerelease: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 35967b42..9d4a3728 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,6 +16,8 @@ jobs:
   release:
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for authentication using OIDC
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
@@ -25,13 +27,8 @@ jobs:
           channel: "stable"
       - run: dart --version
       - run: flutter --version
-      - name: Setup credentials
-        run: |
-          cat <<EOF > $PUB_CACHE/credentials.json
-          ${{ secrets.CREDENTIALS }}
-          EOF
       - name: Publish package
-        run: flutter pub publish --force
+        uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1
       - name: Get Changelog Entry
         id: changelog_reader
         uses: mindsers/changelog-reader-action@v2.0.0
@@ -39,4 +36,4 @@ jobs:
         uses: softprops/action-gh-release@v1
         with:
           tag_name: ${{ steps.changelog_reader.outputs.version }}
-          body: ${{ steps.changelog_reader.outputs.changes }}
\ No newline at end of file
+          body: ${{ steps.changelog_reader.outputs.changes }}