Use trusted publishing

Author: MartinHjelmare

.github/workflows/publish-to-pypi.yml

@@ -7,22 +7,21 @@ on:
 jobs:
   build-and-publish:
     name: Builds and publishes releases to PyPI
+    environment: pypi
+    permissions:
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
     runs-on: ubuntu-latest
     steps:
       - uses: actions/[email protected]
       - name: Set up Python 3.12
         uses: actions/[email protected]
         with:
           python-version: "3.12"
-      - name: Install wheel
+      - name: Install build
         run: |-
-          pip install wheel
+          pip install build
       - name: Build
         run: |-
-          pip install build
           python -m build
       - name: Publish release to PyPI
         uses: pypa/[email protected]
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_TOKEN }}