From aba7bab5393dd1e2aaf9292da3f5132d2c06ed4a Mon Sep 17 00:00:00 2001
From: Kuberhealthy Coder <kuberhealthy-coder[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 22:54:31 +0000
Subject: [PATCH] fix: enable trusted PyPI publishing

Signed-off-by: Kuberhealthy Coder <kuberhealthy-coder[bot]@users.noreply.github.com>
---
 .github/workflows/publish.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8640b3b..b95dfb6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -28,7 +28,8 @@ jobs:
   publish-pypi:
     needs: build
     runs-on: ubuntu-latest
-    permissions: {}
+    permissions:
+      id-token: write
     steps:
       - name: Download package artifacts
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
@@ -37,9 +38,6 @@ jobs:
           path: dist
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
 
   attach-release-assets:
     needs: [build, publish-pypi]