From 0bac8279d12dfa489276632e54a5f1d4e685cbfc Mon Sep 17 00:00:00 2001
From: Michael Mouchous <99665078+mmouchous-ledger@users.noreply.github.com>
Date: Mon, 8 Apr 2024 14:30:35 +0200
Subject: [PATCH] Update python-publish.yml

https://docs.pypi.org/trusted-publishers/using-a-publisher/
---
 .github/workflows/python-publish.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index e2cbcd7..9df67bb 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -21,6 +21,9 @@ jobs:
     runs-on: ubuntu-latest
 
     environment: release
+    permissions:
+      # This permission is mandatory for trusted publishing
+      id-token: write
     
     steps:
     - uses: actions/checkout@v3
@@ -35,7 +38,4 @@ jobs:
     - name: Build package
       run: python -m build
     - name: Publish package
-      uses: pypa/gh-action-pypi-publish@27b31702a0e7fc50959f5ad993c78deac1bdfc29
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
+      uses: pypa/gh-action-pypi-publish@release/v1