Pypi no longer allows username/password publishing

.github/workflows/publish_wheels.yml

@@ -28,12 +28,24 @@ jobs:
           cd $GITHUB_WORKSPACE
           pip3 install tox
           DIST_FILE=`ls dist/*whl` && tox --installpkg=$DIST_FILE -e ${{ matrix.python_version }}
+  pypi-publish:
+    runs-on: ubuntu-22.04
+    # IMPORTANT: this permission is mandatory for trusted publishing
+    permissions:
+      id-token: write
+    steps:
+      - name: Download artifacts produced by the Build Wheel job
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Display structure of downloaded files
+        run: ls -R
+        working-directory: dist
+
       - name: Upload Wheel
         if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
-        env:
-            PYPI_URL: ${{ secrets.PYPI_URL }}
-            PYPI_USER: ${{ secrets.PYPI_USER }}
-            PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
-        run: |
-          pip3 install twine
-          python${{ matrix.python_version }} -m twine upload --username $PYPI_USER --password $PYPI_TOKEN dist/*
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages_dir: dist/