Publish to PyPI using trusted publishing

Signed-off-by: Emanuele Giaquinta <[email protected]>

.github/workflows/release.yml

@@ -180,23 +180,20 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     name: Release
     runs-on: ubuntu-latest
-    env:
-      TWINE_PASSWORD: ${{secrets.TWINE_PASSWORD}}
-      TWINE_USERNAME: ${{secrets.TWINE_USERNAME}}
     needs: [
       build-linux-x86_64,
       build-linux-cross,
       build-windows,
       build-macos-universal,
       build-sdist,
     ]
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v3
         with:
           name: wheels
           path: wheels
-      - uses: actions/setup-python@v5
+      - uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          python-version: '3.11'
-      - run: python -m pip install -U pip wheel twine
-      - run: twine upload --non-interactive --skip-existing wheels/*
+          packages-dir: wheels/