From 19df2666ab599eecb254a7e0c874fc7a5e0a5b01 Mon Sep 17 00:00:00 2001
From: "J. Nick Koston" <nick@koston.org>
Date: Tue, 1 Apr 2025 09:51:03 -1000
Subject: [PATCH] feat: use trusted publishing to upload wheels (#445)

---
 .github/workflows/ci.yml | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7392b9c..8b70607 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -217,7 +217,9 @@ jobs:
     needs: [build_wheels]
     runs-on: ubuntu-latest
     environment: release
-
+    permissions:
+      id-token: write
+      contents: write
     steps:
       - uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
         with:
@@ -228,8 +230,3 @@ jobs:
           merge-multiple: true
 
       - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_TOKEN }}
-
-          # To test: repository_url: https://test.pypi.org/legacy/