fix: use PYPI_API_TOKEN secret instead of OIDC for PyPI publishing

[Venkatesh-6921]

Summary by CodeRabbit

• Documentation

  • Updated publishing documentation with new authentication setup instructions for maintainers
  • Updated release notes for version 3.0.0 to reflect publishing changes
  • Added guidance on repository secret configuration

• Chores

  • Updated continuous integration publishing workflow

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: ee236e68-f5c1-4ec6-bb17-f46bd7afa193

📥 Commits

Reviewing files that changed from the base of the PR and between 40254ff and 5e9ec6a.

📒 Files selected for processing (3)

• .github/workflows/publish.yml
• CHANGELOG.md
• README.md

---

📝 Walkthrough

Walkthrough

This PR switches PyPI publishing from OIDC trusted publishing to token-based authentication. The workflow's permissions block is removed, the publish step is updated to use secrets.PYPI_API_TOKEN, and documentation is revised to reflect the new setup requirements and configuration.

Changes

PyPI Publishing Authentication

Layer / File(s)	Summary
Workflow Publishing Configuration .github/workflows/publish.yml	Removes the workflow-level OIDC permissions (id-token: write), updates the PyPI publish action to use password: ${{ secrets.PYPI_API_TOKEN }} for token-based authentication, and removes a preceding comment line in the changelog extraction script.
Documentation and Changelog Updates CHANGELOG.md, README.md	Updates changelog entries for version 3.0.0 and security notes to describe token-based publishing with PYPI_API_TOKEN. README's Publishing section is updated with new setup instructions to configure the secret under Settings → Secrets → Actions.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 The token now flows where trust once lived,
No OIDC dance, just secrets that give.
GitHub holds the key with a careful hand,
PyPI awaits, across the land! 🚀

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/v3-upgrade

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}