From 06e292fa0c60a0c9befd6c48b4df33c4dc0c4763 Mon Sep 17 00:00:00 2001
From: Todd Baert <todd.baert@dynatrace.com>
Date: Thu, 5 Nov 2026 14:44:58 -0500
Subject: [PATCH] ci: publish to PyPI via OIDC trusted publishing

Signed-off-by: Todd Baert <todd.baert@dynatrace.com>
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 019c826..be06815 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,6 +34,7 @@ jobs:
         environment: publish
         permissions:
             contents: read
+            id-token: write
         if: ${{ fromJSON(needs.release-please.outputs.release_created || false) }}
 
         steps:
@@ -47,5 +48,4 @@ jobs:
 
             - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
               with:
-                  password: ${{ secrets.PYPI_PUBLISH_TOKEN }}
                   attestations: false # this can be made true once our repo is public