publish tags

Author: zacswider

.github/workflows/CI.yml

@@ -35,28 +35,17 @@ jobs:
         shell: bash -l {0}
         run: uv run pytest
 
-  build_and_publish:
-      name: Build and Publish to PyPI
-      needs: test
-      if: startsWith(github.ref, 'refs/tags/') && github.event.head_commit.message != '[skip ci]'
-      runs-on: ubuntu-latest
-      steps:
-        - uses: actions/checkout@v4
-        - name: Set up Python 3.9
-          uses: actions/setup-python@v5
-          with:
-            python-version: "3.9"
-        - name: Install dependencies
-          run: |
-            python -m pip install --upgrade pip
-            python -m pip install setuptools wheel
-            python -m pip install twine
-        - name: Build package
-          run: |
-            python -m pip install --upgrade pip
-            pip install build
-            python -m build
-        - name: Publish distribution to PyPI
-          uses: pypa/gh-action-pypi-publish@release/v1
-          with:
-            password: ${{ secrets.PYPI_API_TOKEN }}
+  pypi-publish:
+    name: upload release to PyPI
+    runs-on: ubuntu-latest
+    needs: test
+    if: startsWith(github.ref, 'refs/tags/')
+    environment: pypi
+    permissions:
+      # IMPORTANT: this permission is mandatory for Trusted Publishing
+      id-token: write
+    steps:
+      # retrieve your distributions here
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1