Work around trusted publisher failures

Author: dwoz

.github/workflows/ci.yml

@@ -126,18 +126,35 @@ jobs:
     with:
       changed-files: ${{ needs.get-changed-files.outputs.changed-files }}
 
+  #deploy-python-package:
+  #  name: Deploy Python Package
+  #  uses: ./.github/workflows/deploy-package-action.yml
+  #  if: ${{ inputs.kind == 'release' && success() }}
+  #  needs:
+  #    - pre-commit
+  #    - test
+  #    - docs
+  #    - build-python-package
+  #    - test-fips
+  #  secrets:
+  #    PYPI_API_TOKEN: "${{ secrets.PYPI_API_TOKEN }}"
+
   deploy-python-package:
-    name: Deploy Python Package
-    uses: ./.github/workflows/deploy-package-action.yml
+    name: "Deploy python package"
+    runs-on: ubuntu-latest
     if: ${{ inputs.kind == 'release' && success() }}
     needs:
       - pre-commit
       - test
       - docs
       - build-python-package
       - test-fips
-    secrets:
-      PYPI_API_TOKEN: "${{ secrets.PYPI_API_TOKEN }}"
+    steps:
+      - name: Run deploy package action
+        uses: the-actions-org/workflow-dispatch@v4
+        with:
+          workflow: Relenv Python Package
+          inputs: '{ "run_id": "${{ github.run_id }}" }'
 
   create-release:
     name: Create Github Release

.github/workflows/deploy-package-action.yml

@@ -1,27 +1,38 @@
 name: Relenv Python Package
 
 on:
-  workflow_call:
-    secrets:
-      PYPI_API_TOKEN:
+  workflow_dispatcht:
+    inputs:
+      run_id:
         required: true
 
 jobs:
   build:
     name: Publish Python Wheel
     runs-on: ubuntu-latest
+    environment: release
     steps:
+
       - name: Download Source Tarball Artifact
         uses: actions/download-artifact@v4
         with:
           name: Source Tarball
           path: dist
+          run_id: ${{ inputs.run_id }}
+          gihtub-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Download Wheel Artifact
         uses: actions/download-artifact@v4
         with:
           name: Python Wheel
           path: dist
+          run_id: ${{ inputs.run_id }}
+          gihtub-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Publish distribution to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
+          verbose: true
+          print-hash: true
+          skip-existing: true
+          verify-metadata: true