Use trusted publisher

.github/workflows/deploy-package-action.yml

@@ -1,22 +1,21 @@
 name: Relenv Python Package
 
-on:
-  workflow_call:
-    secrets:
-      PYPI_API_TOKEN:
-        required: true
+on: workflow_call
 
 jobs:
   build:
     name: Publish Python Wheel
     runs-on: ubuntu-latest
     steps:
-    - name: Download Python Package Artifacts
-      uses: actions/download-artifact@v3
-      with:
-        name: dist
-        path: dist
-    - name: Publish distribution to PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
+      - name: Download Python Package Artifacts
+        uses: actions/download-artifact@v3
+        with:
+          name: dist
+          path: dist
+      - name: Publish distribution to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          verbose: true
+          print-hash: true
+          skip-existing: true
+          verify-metadata: true

.github/workflows/release.yml

@@ -23,8 +23,9 @@ jobs:
     permissions:
       contents: write
       pull-requests: read
+      id-token: write
     uses: ./.github/workflows/ci.yml
-    if: contains('["dwoz","MKLeb","s0undt3ch"]', github.actor)
+    if: contains('["dwoz", "twangboy", "dmurhpy18"]', github.actor)
     with:
       kind: "${{ inputs.kind }}"
       package_command: "${{ inputs.package_command }}"