Merge branch 'main' of https://github.com/h5rdly/webtoken

Author: h5rdly

.github/workflows/release.yml

@@ -16,45 +16,40 @@ jobs:
     strategy:
       matrix:
         include:
-          # Linux x86 (Standard)
           - name: Linux x86
             os: ubuntu-latest
             target: x86_64
             manylinux: auto
             qemu: false
 
-          # Linux Musl (Alpine)
           - name: Musl x86
             os: ubuntu-latest
             target: x86_64
             manylinux: musllinux_1_2
             qemu: false
 
-          # Linux ARM64
           - name: Linux ARM64
             os: ubuntu-latest
             target: aarch64
             manylinux: auto
             qemu: true
 
-          # MacOS x86 + ARM
           - name: MacOS
             os: macos-latest
             target: x86_64
-            manylinux: auto # Field ignored by maturin for Mac
+            manylinux: auto
             qemu: false
 
-          # Windows
           - name: Windows
             os: windows-latest
             target: x64
-            manylinux: auto # Field ignored by maturin for Windows
+            manylinux: auto
             qemu: false
 
     steps:
       - uses: actions/checkout@v6
 
-      - name: Set up QEMU    # for ARM64 builds on Linux
+      - name: Set up QEMU
         if: matrix.qemu
         uses: docker/setup-qemu-action@v3
 
@@ -92,17 +87,17 @@ jobs:
     name: PyPI
     needs: [build_wheels, build_sdist]
     runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    
     steps:
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           pattern: wheels-*
           path: dist
           merge-multiple: true
 
-      - name: Install uv
-        uses: astral-sh/setup-uv@v7
-
       - name: Publish to PyPI
-        run: uv publish dist/*
-        env:
-          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+        uses: pypa/gh-action-pypi-publish@release/v1