Update pypi_publish.yml

Author: paullinnerud

.github/workflows/pypi_publish.yml

@@ -64,6 +64,11 @@ jobs:
   upload_pypi:
      needs: [build-n-publish]
      runs-on: ubuntu-latest
+     environment:
+      name: pypi
+      url: https://pypi.org/p/dwriteshapepy  # Replace <package-name> with your PyPI project name
+     permissions:
+       id-token: write  # IMPORTANT: mandatory for trusted publishing
      if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v')
      steps:
       - uses: actions/download-artifact@v4
@@ -76,9 +81,7 @@ jobs:
           name: source-dist-artifact
           path: dist
 
-      - uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.pypi_password }}
+      - name: Publish distribution 📦 to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1