diff --git a/.github/workflows/build-golang-macos.yaml b/.github/workflows/build-golang-macos.yaml
index 30b7e3b..03d73dd 100644
--- a/.github/workflows/build-golang-macos.yaml
+++ b/.github/workflows/build-golang-macos.yaml
@@ -1,10 +1,7 @@
 ---
-name: macOS -- Build Python wheel using golang's gopy
+name: macOS build
 
-on:
-  push:
-      branches:
-          - main
+on: [push]
 
 defaults:
   run:
@@ -17,102 +14,37 @@ jobs:
   build:
     runs-on: macos-13
     permissions:
-        contents: write
+      contents: write
 
     strategy:
-        fail-fast: true
-        matrix:
-            go-version: [1.22.x]
+      fail-fast: true
+      matrix:
+        go-version: [1.22.x]
+        python3_version: [ "3.11", "3.12" ]
 
     steps:
-        - uses: actions/checkout@v4
-
-        # - name: Setup Docker on macOS using Colima, Lima-VM, and Homebrew
-        #   uses: douglascamata/setup-docker-macos-action@v1-alpha
-
-
-        # - name: Verify docker Installation
-        #   run: |
-        #     docker --version
-        #     docker ps
-
-        # - name: Setup vagrant
-        #   run: |
-        #       brew install vagrant
-        #       vagrant --version
-
-        - name: Setup Go
-          uses: actions/setup-go@v4
-          with:
-              go-version: ${{ matrix.go-version }}
-              cache-dependency-path: go.sum
-        - name: Install dependencies
-          run: go get .
-        - name: Test with Go
-          run: go test -timeout 40s -run ^TestHello$ gotdf_python -count=1 # go test
-
-        - name: Set up Python
-          uses: actions/setup-python@v4
-          with:
-              python-version: '3.12'
-
-        - name: Install dependencies
-          run: |
-              pip install poetry
-
-              # Look for go/bin (skip, we know it exists)
-              echo '$HOME/'
-              ls -la "$HOME/"
-
-              echo '$HOME/.local/'
-              ls -la "$HOME/.local/"
-
-              echo '$HOME/go/'
-              ls -la "$HOME/go/"
-
-        - name: Add Go bin directory to PATH
-          run: echo "export PATH=$PATH:~/.local/go/bin" >> $GITHUB_ENV
-
-        # FIXME: Add more caching
-        - name: Add gopy dependencies and build wheel
-          run: |
-            ./ci-build.sh
-
-        - name: Test Python wheel
-          run: |
-              # Test wheel installation
-              pip install dist/otdf_python-0.1.10-py3-none-any.whl
-
-              # Test wheel functionality
-              # python3 validate_otdf_python.py
-
-        # - uses: ./.github/workflows/platform-integration-test.yaml
-        #   with:
-        #     wheel: dist/otdf_python-0.1.10-py3-none-any.whl
-
-  # release:
-  #   needs: build
-  #   runs-on: macos-latest
-  #   if: github.ref == 'refs/heads/main'
-  #   permissions:
-  #       contents: write
-  #   steps:
-  #       - uses: actions/checkout@v4
-
-        - name: Store version
-          run: |
-              pip install poetry
-
-              PROJECT_VESION=$(poetry version -s)
-              echo "PROJECT_VESION=$PROJECT_VESION" >> $GITHUB_ENV
-
-        - name: Install twine
-          run: pip install twine
-
-        - name: Upload to PyPI
-          env:
-            TWINE_UPLOAD_URL: https://upload.pypi.org/legacy/
-            PYPI_USERNAME: ${{ secrets.PYPI_USERNAME }}
-            PYPI_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-          run: |
-            twine upload --password "$PYPI_PASSWORD" --user "$PYPI_USERNAME" --repository-url "$TWINE_UPLOAD_URL" dist/*
+      - uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: ${{ matrix.go-version }}
+          cache-dependency-path: go.sum
+      - name: Install dependencies
+        run: go get .
+      - name: Test with Go
+        run: go test -timeout 40s -run ^TestHello$ gotdf_python -count=1 # go test
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python3_version }}
+
+      # FIXME: Add more caching
+      - name: Configure gopy / dependencies, and build wheel
+        run: |
+          ./ci-build.sh
+
+      # - uses: ./.github/workflows/platform-integration-test.yaml
+      #   with:
+      #     wheel: dist/otdf_python-0.1.12-py3-none-any.whl
diff --git a/.github/workflows/build-golang-ubuntu.yaml b/.github/workflows/build-golang-ubuntu.yaml
index 743a497..f5d6ecb 100644
--- a/.github/workflows/build-golang-ubuntu.yaml
+++ b/.github/workflows/build-golang-ubuntu.yaml
@@ -1,92 +1,65 @@
 ---
-name: Ubuntu -- Build Python wheel using golang's gopy
+name: Ubuntu build
 
 on: [push]
 
 jobs:
-    call-lint:
-      uses: ./.github/workflows/lint-on-ubuntu.yaml
-
-    build:
-        runs-on: ubuntu-latest
-        permissions:
-            contents: write
-
-        strategy:
-            fail-fast: true
-            matrix:
-                go-version: [1.22.x]
-                # go-version: [ '1.19', '1.20', '1.22.x' ]
-
-        steps:
-            - uses: actions/checkout@v4
-
-
-            - name: Setup Go
-              uses: actions/setup-go@v4
-              with:
-                  go-version: ${{ matrix.go-version }}
-                  cache-dependency-path: go.sum
-            - name: Install dependencies
-              run: go get .
-            - name: Test with Go
-              run: go test -timeout 40s -run ^TestHello$ gotdf_python -count=1 # go test
-
-            - name: Set up Python
-              uses: actions/setup-python@v4
-              with:
-                  python-version: '3.12'
-
-            - name: Install dependencies
-              run: |
-                  pip install poetry
-
-                  # Look for go/bin (skip, we know it exists)
-                  echo '$HOME/'
-                  ls -la "$HOME/"
-
-                  echo '$HOME/.local/'
-                  ls -la "$HOME/.local/"
-
-                  echo '$HOME/go/'
-                  ls -la "$HOME/go/"
-
-            - name: Add Go bin directory to PATH
-              run: echo "export PATH=$PATH:~/.local/go/bin" >> $GITHUB_ENV
-
-            # FIXME: Add more caching
-            - name: Add gopy dependencies and build wheel
-              run: |
-                ./ci-build.sh
-
-            - name: Check existing workspace content
-              run: |
-                  ls -la
-                  ls -la dist/
-
-            - name: Test Python wheel
-              run: |
-                  # Test wheel installation
-                  pip install dist/otdf_python-0.1.10-py3-none-any.whl
-
-                  # DISABLED: Need to figure out Ubuntu nested VM
-                  # Test wheel functionality
-                  # python3 validate_otdf_python.py
-
-            - uses: actions/cache/restore@v4
-              with:
-                path: dist/otdf_python-0.1.10-py3-none-any.whl
-                key: ${{ runner.os }}-data-${{ github.sha }}
-
-            - uses: actions/cache/save@v4
-              with:
-                path: dist/otdf_python-0.1.10-py3-none-any.whl
-                key: ${{ runner.os }}-data-${{ github.sha }}
-                restore-keys: |
-                  ${{ runner.os }}-data-
-
-    integration-test:
-      needs: build
-      uses: ./.github/workflows/platform-integration-test.yaml
-      with:
-        wheel: dist/otdf_python-0.1.10-py3-none-any.whl
+  call-lint:
+    uses: ./.github/workflows/lint-on-ubuntu.yaml
+
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    strategy:
+      fail-fast: true
+      matrix:
+        go-version: [1.22.x]
+        python3_version: [ "3.11", "3.12" ]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: ${{ matrix.go-version }}
+          cache-dependency-path: go.sum
+      - name: Install dependencies
+        run: go get .
+      - name: Test with Go
+        run: go test -timeout 40s -run ^TestHello$ gotdf_python -count=1 # go test
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python3_version }}
+
+      # FIXME: Add more caching
+      - name: Configure gopy / dependencies, and build wheel
+        run: |
+          ./ci-build.sh
+
+      - uses: actions/cache/restore@v4
+        with:
+          path: dist/otdf_python-0.1.12-py3-none-any.whl
+          key: ${{ runner.os }}${{ matrix.python3_version }}-data-${{ github.sha }}
+
+      - uses: actions/cache/save@v4
+        with:
+          path: dist/otdf_python-0.1.12-py3-none-any.whl
+          key: ${{ runner.os }}${{ matrix.python3_version }}-data-${{ github.sha }}
+          restore-keys: |
+            ${{ runner.os }}${{ matrix.python3_version }}-data-
+
+  integration-test:
+    strategy:
+      fail-fast: true
+      matrix:
+        python3_version: [ "3.11", "3.12" ]
+    needs: build
+    uses: ./.github/workflows/platform-integration-test.yaml
+    with:
+      wheel: dist/otdf_python-0.1.12-py3-none-any.whl
+      python_version: ${{ matrix.python3_version }}
diff --git a/.github/workflows/platform-integration-test.yaml b/.github/workflows/platform-integration-test.yaml
index 4a7e14b..04ae750 100644
--- a/.github/workflows/platform-integration-test.yaml
+++ b/.github/workflows/platform-integration-test.yaml
@@ -12,6 +12,10 @@ on:
         description: The Python wheel to test
         required: true
         type: string
+      python_version:
+        description: The wheel's Python version (like "3.12" or "3.13")
+        required: true
+        type: string
 
 permissions:
   contents: read
@@ -25,8 +29,8 @@ jobs:
 
       - uses: actions/cache/restore@v4
         with:
-          path: dist/otdf_python-0.1.10-py3-none-any.whl
-          key: ${{ runner.os }}-data-${{ github.sha }}
+          path: dist/otdf_python-0.1.12-py3-none-any.whl
+          key: ${{ runner.os }}${{ inputs.python_version }}-data-${{ github.sha }}
 
       - name: Prove that the input file is available
         shell: bash
@@ -112,7 +116,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
-            python-version: '3.12'
+            python-version: ${{ inputs.python_version }}
 
       - name: Validate the Python SDK
         env:
diff --git a/.github/workflows/publish-test.yaml b/.github/workflows/publish-test.yaml
index 9ebc921..c7ea63f 100644
--- a/.github/workflows/publish-test.yaml
+++ b/.github/workflows/publish-test.yaml
@@ -180,6 +180,8 @@ jobs:
   release:
     permissions:
       contents: write
+      # This permission is mandatory for PyPI's trusted publishing
+      id-token: write
     needs: [build_macos, build_linux_x86_64]
     runs-on: ubuntu-latest
     # if: github.ref == 'refs/heads/main'
@@ -202,16 +204,16 @@ jobs:
               PROJECT_VESION=$(poetry version -s)
               echo "PROJECT_VESION=$PROJECT_VESION" >> $GITHUB_ENV
 
-        - name: Install twine
-          run: pip install twine
-
-        - name: Upload to PyPI
-          env:
-            TWINE_UPLOAD_URL: https://test.pypi.org/legacy/
-            PYPI_USERNAME: ${{ secrets.PYPI_TEST_USERNAME }}
-            PYPI_PASSWORD: ${{ secrets.PYPI_TEST_PASSWORD }}
-          run: |
-            twine upload --password "$PYPI_PASSWORD" --user "$PYPI_USERNAME" --repository-url "$TWINE_UPLOAD_URL" dist/*
+        # Publish with "trusted publisher" mechanism:
+        # https://docs.pypi.org/trusted-publishers/
+        #
+        # Requires GHA token permission (above in YAML) and PyPI magement:
+        #   https://test.pypi.org/manage/project/otdf-python/settings/publishing/
+        - name: Publish package distributions to PyPI
+          uses: pypa/gh-action-pypi-publish@release/v1
+          with:
+            repository-url: https://test.pypi.org/legacy/
+            packages-dir: dist/
 
         - uses: ncipollo/release-action@v1
           with:
@@ -219,5 +221,6 @@ jobs:
                 README.md,
                 dist/*.whl
             body: otdf_python version ${{ env.PROJECT_VESION }}
+            makeLatest: "false"
             tag: "${{ env.PROJECT_VESION }}-dev-${{ github.sha }}"
             # tag: v${{ env.PROJECT_VESION }}
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 5ae8bd5..08eb0df 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -180,6 +180,8 @@ jobs:
   release:
     permissions:
       contents: write
+      # This permission is mandatory for PyPI's trusted publishing
+      id-token: write
     needs: [build_macos, build_linux_x86_64]
     runs-on: ubuntu-latest
     # if: github.ref == 'refs/heads/main'
@@ -202,16 +204,16 @@ jobs:
               PROJECT_VESION=$(poetry version -s)
               echo "PROJECT_VESION=$PROJECT_VESION" >> $GITHUB_ENV
 
-        - name: Install twine
-          run: pip install twine
-
-        - name: Upload to PyPI
-          env:
-            TWINE_UPLOAD_URL: https://upload.pypi.org/legacy/
-            PYPI_USERNAME: ${{ secrets.PYPI_USERNAME }}
-            PYPI_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-          run: |
-            twine upload --password "$PYPI_PASSWORD" --user "$PYPI_USERNAME" --repository-url "$TWINE_UPLOAD_URL" dist/*
+        # Publish with "trusted publisher" mechanism:
+        # https://docs.pypi.org/trusted-publishers/
+        #
+        # Requires GHA token permission (above in YAML) and PyPI magement:
+        #   https://pypi.org/manage/project/otdf-python/settings/publishing/
+        - name: Publish package distributions to PyPI
+          uses: pypa/gh-action-pypi-publish@release/v1
+          with:
+            # repository-url: https://pypi.org/legacy/
+            packages-dir: dist/
 
         - uses: ncipollo/release-action@v1
           with:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index cd1a8fc..37cf25c 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -40,7 +40,7 @@ repos:
 
     - repo: https://github.com/astral-sh/ruff-pre-commit
       # Ruff version.
-      rev: v0.7.4
+      rev: v0.8.0
       hooks:
         # Run the linter.
         - id: ruff
diff --git a/ci-build.sh b/ci-build.sh
index 30dffc5..a11dd93 100755
--- a/ci-build.sh
+++ b/ci-build.sh
@@ -2,6 +2,37 @@
 
 set -eou pipefail
 
+printf """
+
+✨✨✨ Configure gopy / dependencies, and build wheel ✨✨✨
+
+"""
+
+echo "python -VV"
+python -VV
+
+echo 'python -c "import sys; print(sys.executable)"'
+python -c "import sys; print(sys.executable)"
+
+echo 'pip -V'
+pip -V
+
+echo 'pip install poetry'
+pip install poetry
+
+# Look for go/bin (skip, we know it exists)
+echo '$HOME/'
+ls -la "$HOME/"
+
+echo '$HOME/.local/'
+ls -la "$HOME/.local/"
+
+echo '$HOME/go/'
+ls -la "$HOME/go/"
+
+# Add Go bin directory to PATH
+echo "export PATH=$PATH:~/.local/go/bin" >> $GITHUB_ENV
+
 # Since we don't have our wheel build / install configured yet we use '--no-root'
 poetry install --no-root
 
@@ -19,3 +50,5 @@ poetry run pip install --upgrade setuptools wheel
 gopy build --output=otdf_python -vm=python3 .
 
 poetry run python3 setup.py bdist_wheel
+
+pip install dist/otdf_python-0.1.12-py3-none-any.whl
diff --git a/make_and_validate_script.sh b/make_and_validate_script.sh
index d99b7c2..94e6215 100755
--- a/make_and_validate_script.sh
+++ b/make_and_validate_script.sh
@@ -42,7 +42,7 @@ python3 -m pip install --upgrade setuptools wheel
 python3 setup.py bdist_wheel
 
 # Prove that the wheel can be installed
-pip install dist/otdf_python-0.1.10-py3-none-any.whl
+pip install dist/otdf_python-0.1.12-py3-none-any.whl
 
 if [[ "$SKIP_TESTS" == "-s" || "$SKIP_TESTS" == "--skip-tests" ]]; then
     echo "Build is complete, skipping tests."
diff --git a/pyproject.toml b/pyproject.toml
index 3b60679..b5d3860 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,7 +1,7 @@
 [tool.poetry]
 name = "otdf-python"
 # Should match 'setup.py' version number (used for gopy/pybindgen)
-version = "0.1.10"
+version = "0.1.12"
 description = "Unofficial OpenTDF SDK for Python."
 authors = ["b-long <b-long@users.noreply.github.com>"]
 readme = "README.md"
diff --git a/setup.py b/setup.py
index 3fb1662..00228d6 100644
--- a/setup.py
+++ b/setup.py
@@ -24,7 +24,7 @@
     url="https://github.com/b-long/opentdf-python-sdk",
     package_data={"otdf_python": ["*.so"]},
     # Should match 'pyproject.toml' version number
-    version="0.1.10",
+    version="0.1.12",
     author_email="b-long@users.noreply.github.com",
     include_package_data=True,
 )
diff --git a/setup_ci.py b/setup_ci.py
index 2d02efe..d33341d 100644
--- a/setup_ci.py
+++ b/setup_ci.py
@@ -81,7 +81,7 @@ def build_extension(self, ext: Extension):
 
 setuptools.setup(
     name="otdf_python",
-    version="0.1.10",
+    version="0.1.12",
     author="b-long",
     description="Unofficial OpenTDF SDK for Python.",
     long_description_content_type="text/markdown",