fix pypi publish workflwo to work with trusted publishing

Author: sierra-moxon

.github/workflows/pypi-publish.yaml

@@ -1,31 +1,34 @@
 ---
-name: Publish Python Package
+name: Publish Python 🐍 package to PyPI
 
 on:
   release:
-    types: [created]
+    types: [published]
+
+permissions:
+  id-token: write  # REQUIRED for OIDC
+  contents: read   # required for checkout
 
 jobs:
-  build-n-publish:
-    name: Build and publish Python 🐍 distributions 📦 to PyPI
+  publish:
+    name: Publish to PyPI
+    environment: release  # Must match the environment name in PyPI
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - name: Check out repository
+        uses: actions/checkout@v4
 
-      - name: Install uv
-        uses: astral-sh/setup-uv@v3
+      - name: Set up Python
+        uses: actions/setup-python@v5
         with:
-          enable-cache: true
+          python-version: '3.x'
 
-      - name: Set up Python
-        run: uv python install 3.10
+      - name: Install build tools
+        run: pip install build
 
-      - name: Build source and wheel archives
-        run: uv build
+      - name: Build package
+        run: python -m build
 
-      - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.2.2
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_PASSWORD }}
+      - name: Publish to PyPI via Trusted Publisher
+        uses: pypa/gh-action-pypi-publish@release/v1