Use Trusted Publishing on RubyGems.org

.github/workflows/release.yml

@@ -12,6 +12,9 @@ jobs:
 
     runs-on: ubuntu-latest
 
+    permissions:
+      id-token: write
+
     steps:
     - name: Checkout
       uses: actions/checkout@v4
@@ -23,7 +26,8 @@ jobs:
       with:
         ruby-version: ruby
 
+    - name: Configure trusted publishing credentials
+      uses: rubygems/[email protected]
+
     - name: Release
-      run: rake -f -r bundler/gem_tasks release
-      env:
-        GEM_HOST_API_KEY: ${{ secrets.GEM_HOST_API_KEY }}
+      runs: rake -f -r bundler/gem_tasks release

sassc-embedded.gemspec

@@ -2,7 +2,7 @@
 
 require_relative 'lib/sassc/embedded/version'
 
-Gem::Specification.new do |spec| # rubocop:disable Gemspec/RequireMFA
+Gem::Specification.new do |spec|
   spec.name          = 'sassc-embedded'
   spec.version       = SassC::Embedded::VERSION
   spec.authors       = ['なつき']
@@ -14,7 +14,8 @@ Gem::Specification.new do |spec| # rubocop:disable Gemspec/RequireMFA
   spec.metadata      = {
     'documentation_uri' => 'https://rubydoc.info/gems/sassc',
     'source_code_uri' => "#{spec.homepage}/tree/v#{spec.version}",
-    'funding_uri' => 'https://github.com/sponsors/ntkme'
+    'funding_uri' => 'https://github.com/sponsors/ntkme',
+    'rubygems_mfa_required' => 'true'
   }
 
   spec.files = Dir['lib/**/*.rb', 'vendor/github.com/sass/sassc-ruby/lib/**/*.rb'] + [