Update release workflow to use Trusted Publishing (#593)

Author: cdce8p

.github/workflows/release.yaml

@@ -6,7 +6,7 @@ on:
       - published
 
 env:
-  DEFAULT_PYTHON: 3.12
+  DEFAULT_PYTHON: 3.13
 
 jobs:
   release-pypi:
@@ -16,6 +16,7 @@ jobs:
       name: PyPI
       url: https://pypi.org/project/python-typing-update/
     permissions:
+      id-token: write  # Required for publishing with OIDC to PyPI
       contents: write  # Required to upload release assets
     steps:
       - name: Check out code from Github
@@ -27,16 +28,11 @@ jobs:
           python-version: ${{ env.DEFAULT_PYTHON }}
       - name: Build distributions
         run: |
-          python -m pip install -U pip twine build
+          python -m pip install -U pip build
           python -m build
       - name: Upload to PyPI
         if: github.event_name == 'release' && startsWith(github.ref, 'refs/tags')
-        env:
-          TWINE_REPOSITORY: pypi
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
-        run: |
-          twine upload --verbose dist/*
+        uses: pypa/[email protected]
       - name: Upload release assets
         uses: softprops/[email protected]
         with: