👷 pypi trusted release

Author: juftin

.github/workflows/publish.yaml

@@ -4,12 +4,18 @@ on:
     release:
         types:
         -   published
+    workflow_dispatch:
 
 jobs:
     pypi-publish:
         name: PyPI
         if: github.repository_owner == 'juftin'
         runs-on: ubuntu-latest
+        environment:
+            name: pypi
+            url: https://pypi.org/p/lunchable
+        permissions:
+            id-token: write
         steps:
         -   name: Check out the repository
             uses: actions/checkout@v4
@@ -28,10 +34,7 @@ jobs:
             run: |
                 hatch build
         -   name: Publish package on PyPI
-            uses: pypa/gh-action-pypi-publish@v1.8.11
-            with:
-                user: __token__
-                password: ${{ secrets.PYPI_TOKEN }}
+            uses: pypa/gh-action-pypi-publish@release/v1
 
     docker-hub-publish:
         name: docker-hub

.pre-commit-config.yaml

@@ -3,7 +3,7 @@ fail_fast: false
 
 repos:
 -   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
+    rev: v4.6.0
     hooks:
     -   id: trailing-whitespace
     -   id: end-of-file-fixer
@@ -14,7 +14,7 @@ repos:
     -   id: mixed-line-ending
 
 -   repo: https://github.com/macisamuele/language-formatters-pre-commit-hooks
-    rev: v2.8.0
+    rev: v2.13.0
     hooks:
     -   id: pretty-format-toml
         args: [--autofix]