From bc1dd6791308180384cd979c782150d00ce28cf5 Mon Sep 17 00:00:00 2001
From: Hsiaoming Yang <me@lepture.com>
Date: Sat, 31 Aug 2024 00:04:15 +0900
Subject: [PATCH] chore: use trusted publishing for pypi

---
 .github/workflows/pypi.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 32bf3931..1da85c67 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -2,6 +2,7 @@ name: Release to PyPI
 
 permissions:
   contents: write
+  id-token: write
 
 on:
   push:
@@ -53,6 +54,3 @@ jobs:
 
     - name: Push build artifacts to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        skip-existing: true
-        password: ${{ secrets.PYPI_API_TOKEN }}