Attempt to use trusted publisher

Author: yozik04

.github/workflows/publish_pypi.yml

@@ -2,14 +2,16 @@ name: Publish to PyPI
 
 on:
   workflow_call:
-    secrets:
-      PYPI_API_TOKEN:
-        required: true
 
 jobs:
   publish:
     name: Publish to PyPI
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/paradox-alarm-interface
+    permissions:
+      id-token: write
     steps:
     - uses: actions/checkout@v4
     - name: Set up Python
@@ -24,6 +26,3 @@ jobs:
       run: python -m build
     - name: Publish package
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/release.yml

@@ -21,5 +21,3 @@ jobs:
     uses: ./.github/workflows/publish_pypi.yml
     needs: test
     if: github.repository == 'ParadoxAlarmInterface/pai'
-    secrets:
-      PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}