Merge pull request #1154 from jakob-keller/trusted-publishing

Switch to PyPI trusted publishing (#1116)

.github/workflows/python-package.yml

@@ -104,22 +104,13 @@ jobs:
     name: Deploy
     needs: [build-tarball]
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
-    - name: Setup Python 3.8
-      uses: actions/setup-python@v5
-      with:
-        python-version: 3.8
-    - name: Install twine
-      run: |
-        python -m pip install twine
     - name: Download dists
       uses: actions/download-artifact@v4
       with:
         name: dist
         path: dist
     - name: PyPI upload
-      env:
-        TWINE_USERNAME: __token__
-        TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
-      run: |
-        twine upload dist/*
+      uses: pypa/gh-action-pypi-publish@release/v1