From 9a8ab743473d387f06b9d193ffd43f3e8797ec4b Mon Sep 17 00:00:00 2001
From: nonz250 <hosaka.non.work@gmail.com>
Date: Thu, 26 Feb 2026 17:56:47 +0900
Subject: [PATCH] =?UTF-8?q?fix(ci):=20RubyGems=20Trusted=20Publisher=20(OI?=
 =?UTF-8?q?DC)=20=E3=81=AB=E7=A7=BB=E8=A1=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

手動の API キー認証から rubygems/release-gem@v1 アクションによる
OIDC ベースの Trusted Publisher 認証に切り替え。
これにより RUBYGEMS_API_KEY シークレットが不要になり、
MFA による gem push 失敗を解消する。

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .github/workflows/release.yml | 15 +--------------
 1 file changed, 1 insertion(+), 14 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d1dcf75..175f207 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,9 +26,6 @@ jobs:
       - name: Run tests
         run: bundle exec rake spec
 
-      - name: Build gem
-        run: gem build payjpv2.gemspec
-
       - name: Get version from release tag
         id: version
         run: echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
@@ -42,15 +39,5 @@ jobs:
             exit 1
           fi
 
-      - name: Configure RubyGems credentials
-        run: |
-          mkdir -p ~/.gem
-          echo -e "---\n:rubygems_api_key: ${{ secrets.RUBYGEMS_API_KEY }}" > ~/.gem/credentials
-          chmod 0600 ~/.gem/credentials
-
       - name: Publish to RubyGems
-        run: gem push payjpv2-${{ steps.version.outputs.version }}.gem
-
-      - name: Cleanup credentials
-        if: always()
-        run: rm -f ~/.gem/credentials
+        uses: rubygems/release-gem@v1