ci: use service account for publishing to pubDev (#13)

Co-authored-by: Nando Schär <[email protected]>

.github/workflows/release.yml

@@ -13,10 +13,14 @@ jobs:
       - uses: actions/checkout@v4
         with:
           token: ${{ secrets.REPO_DEPLOYMENT_TOKEN }}
+      - uses: google-github-actions/auth@v2
+        with:
+          credentials_json: '${{ secrets.GOOGLE_CREDENTIALS }}'
       - uses: subosito/flutter-action@v2
         with:
           channel: 'stable'
       - run: flutter pub get
+      - run: gcloud auth print-identity-token --audiences=https://pub.dev | dart pub token add https://pub.dev
       - name: release
         uses: cycjimmy/semantic-release-action@v4
         with:
@@ -26,4 +30,3 @@ jobs:
             @semantic-release/changelog
         env:
           GITHUB_TOKEN: ${{ secrets.REPO_DEPLOYMENT_TOKEN }}
-          CREDENTIALS: ${{ secrets.PUB_DEV_DEPLOYMENT_CREDENTIALS }}

.releaserc.json

@@ -14,7 +14,6 @@
     [
       "@semantic-release/exec",
       {
-        "verifyConditionsCmd": "if [ -z \"$CREDENTIALS\" ]; then exit 1; fi && mkdir -p ~/.config/dart && echo \"$CREDENTIALS\" > ~/.config/dart/pub-credentials.json",
         "prepareCmd": "sed -i 's/^version: .*$/version: ${nextRelease.version}/' pubspec.yaml",
         "publishCmd": "flutter pub publish -f"
       }