docs(CHANGES): Document Trusted Publisher migration (#615)

Author: tony

CHANGES

@@ -32,7 +32,12 @@ $ uvx --from 'libtmux' --prerelease allow python
 
 <!-- To maintainers and contributors: Please add notes for the forthcoming version below -->
 
-_Upcoming changes will be written here._
+### CI
+
+#### Migrate to PyPI Trusted Publisher (#615)
+
+PyPI publishing now uses OIDC-based Trusted Publisher instead of API tokens.
+This improves security and enables package attestations for supply chain verification.
 
 ## libtmux 0.52.0 (2025-12-07)