From f243e8c39ea0e8a32feb4e0d53b613a4148329ee Mon Sep 17 00:00:00 2001
From: Timmy Welch <timmy@narnian.us>
Date: Sun, 23 Jun 2024 15:02:58 -0700
Subject: [PATCH] Fix publishing to PyPI

---
 .github/workflows/package.yaml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml
index 4ca99e1..c5b489f 100644
--- a/.github/workflows/package.yaml
+++ b/.github/workflows/package.yaml
@@ -9,6 +9,8 @@ on:
 jobs:
   package:
     permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
       contents: write
     runs-on: ${{ matrix.os }}
     strategy:
@@ -45,11 +47,11 @@ jobs:
           export PKG_CONFIG_PATH="/usr/local/opt/icu4c/lib/pkgconfig:/opt/homebrew/opt/icu4c/lib/pkgconfig${PKG_CONFIG_PATH+:$PKG_CONFIG_PATH}";
           export PATH="/usr/local/opt/icu4c/bin:/usr/local/opt/icu4c/sbin${PATH+:$PATH}"
           python -m tox r
-          python -m tox r -m release
         shell: bash
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+
+      - name: "Publish distribution 📦 to PyPI"
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: pypa/gh-action-pypi-publish@release/v1
 
       - name: Get release name
         if: startsWith(github.ref, 'refs/tags/')