Use trusted publishing on version tag push (#106)

Author: Gallaecio

.github/workflows/publish.yml

@@ -1,26 +1,23 @@
 name: Publish
 on:
-  release:
-    types: [published]
-
+  push:
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+'
 jobs:
   publish:
     runs-on: ubuntu-latest
-
+    environment:
+      name: pypi
+      url: https://pypi.org/p/${{ github.event.repository.name }}
+    permissions:
+      id-token: write
     steps:
     - uses: actions/checkout@v4
-
-    - name: Set up Python 3.13
-      uses: actions/setup-python@v5
+    - uses: actions/setup-python@v5
       with:
         python-version: 3.13
-
-    - name: Build
-      run: |
-        pip install --upgrade build twine
+    - run: |
+        python -m pip install --upgrade build
         python -m build
-
     - name: Publish to PyPI
-      uses: pypa/[email protected]
-      with:
-        password: ${{ secrets.PYPI_TOKEN }}
+      uses: pypa/gh-action-pypi-publish@release/v1