Description
Current problem
We currentely use a long lived token that could potentially be compromised. 2 days ago pypi introduced a new mechanism in order to delegate trust to github, which is then authorized to request short-lived, tightly-scoped API tokens from PyPI.
Desired solution
Use pypa/gh-action-pypi-publish@release/v1 instead of what we currently have.
Additional context
https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/