Support trusted-publishing for package releases

AyanSinhaMahapatra · AyanSinhaMahapatra · commit 95b49dbf9ea5 · 2025-10-22T19:17:26.000+05:30
Signed-off-by: Ayan Sinha Mahapatra &lt;ayansmahapatra@gmail.com&gt;
diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml
@@ -71,6 +71,9 @@ jobs:
     needs:
       - create-gh-release
     runs-on: ubuntu-24.04
+    environment: pypi-publish
+    permissions:
+      id-token: write
 
     steps:
       - name: Download built archives
diff --git a/setup.cfg b/setup.cfg
@@ -56,6 +56,7 @@ dev =
     packaging >= 25.0
     pkginfo >= 1.12.1
     build >= 1.3.0
+    setuptools >= 80.9.0
     aboutcode-toolkit >= 7.0.2
     twine
     ruff
