diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 47c268cf..b50280f2 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -29,7 +29,6 @@ jobs:
         name: Checkout the repository
         with:
           fetch-depth: 0
-          token: ${{ secrets.PAT }}
 
       - name: Setup Python and Git
         uses: ./.github/actions/setup-python-and-git
@@ -91,8 +90,35 @@ jobs:
         with:
           tag-name: ${{ env.TAG_NAME }}
 
+  release:
+    if: ${{ env.PACKAGE == 'true' }}
+    permissions:
+      id-token: write
+      pull-requests: read
+      contents: write
+    steps:
+      - name: Download packages built by build-and-inspect-python-package
+        uses: actions/download-artifact@v4
+        with:
+          name: Packages
+          path: dist
+
+      - name: Download release notes
+        uses: actions/download-artifact@v4
+        with:
+          name: release-notes
+
+      - name: Create a GitHub release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: dist/*
+          tag_name: "${{ env.TAG_NAME }}"
+          body_path: release-notes.md
+
+      - name: Upload package to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+
       - name: Create a GitHub release
-        if: ${{ env.PACKAGE == 'true' }}
         uses: ./.github/actions/release
         with:
           tag-name: ${{ env.TAG_NAME }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 906ccedd..27a5d372 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,7 +1,7 @@
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
     # Ruff version.
-    rev: 'v0.8.2'
+    rev: 'v0.8.3'
     hooks:
       - id: ruff
         args: [--fix, --exit-non-zero-on-fix]
@@ -60,7 +60,7 @@ repos:
             test.*
           )$
   - repo: https://github.com/jsh9/pydoclint
-    rev: 0.5.10
+    rev: 0.5.12
     hooks:
       - id: pydoclint
         args: