trusted pypi publishers

Author: CodeMeAPixel

.github/workflows/pypi-release.yml

@@ -11,11 +11,16 @@ on:
       - "packages/python-sdk/**"
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: read
+
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
 jobs:
   release:
     runs-on: ubuntu-latest
+    environment: pypi
     defaults:
       run:
         working-directory: packages/python-sdk
@@ -39,8 +44,6 @@ jobs:
         run: ls -la dist
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.4.2
+        uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
-          packages_dir: packages/python-sdk/dist
+          packages-dir: packages/python-sdk/dist