Use PyPI Trusted Publishing to push releases

Author: jodal

.github/workflows/release.yml

@@ -7,13 +7,17 @@ on:
 jobs:
   release:
     runs-on: ubuntu-24.04
-
+    environment:
+      name: pypi
+      url: https://pypi.org/project/pykka/
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: hynek/build-and-inspect-python-package@v2
+        id: build
+      - uses: actions/download-artifact@v4
         with:
-          python-version: "3.13"
-      - run: python -m pip install poetry==1.8.3 tox==4.21.2
-      - run: tox --skip-missing-interpreters true
-      - run: poetry build
-      - run: poetry publish --username=__token__ --password=${{ secrets.PYPI_TOKEN }}
+          name: ${{ steps.build.outputs.artifact-name }}
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@release/v1