👷 pypi trusted release

.github/workflows/publish.yaml

@@ -4,13 +4,19 @@ on:
     release:
         types:
             - published
+    workflow_dispatch:
 concurrency:
     group: ${{ github.workflow }}
 jobs:
     pypi-publish:
         name: PyPI
         if: github.repository_owner == 'juftin'
         runs-on: ubuntu-latest
+        environment:
+            name: pypi
+            url: https://pypi.org/p/camply
+        permissions:
+            id-token: write
         steps:
             - name: Check out the repository
               uses: actions/checkout@v4
@@ -29,10 +35,7 @@ jobs:
               run: |
                   hatch build
             - name: Publish package on PyPI
-              uses: pypa/[email protected]
-              with:
-                  user: __token__
-                  password: ${{ secrets.PYPI_TOKEN }}
+              uses: pypa/gh-action-pypi-publish@release/v1
 
     docker-hub-publish:
         name: docker-hub