From c6010cbe4eb3f2df7ae57abf91f81789dad644f2 Mon Sep 17 00:00:00 2001
From: beeb <703631+beeb@users.noreply.github.com>
Date: Mon, 24 Nov 2025 13:02:28 +0100
Subject: [PATCH] ci: move to trusted publishing

---
 .github/workflows/release-plz.yml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 4bfa2cc..c146560 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -10,13 +10,13 @@ on:
       - main
 
 jobs:
-
   release-plz-release:
     name: Release-plz release
     runs-on: ubuntu-latest
     environment: Cargo
     permissions:
       contents: write
+      id-token: write # required for crates.io OIDC token exchange
     steps:
       - name: Generate GitHub token
         uses: actions/create-github-app-token@v2
@@ -37,12 +37,10 @@ jobs:
           command: release
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
 
   release-plz-pr:
     name: Release-plz PR
     runs-on: ubuntu-latest
-    environment: Cargo
     permissions:
       contents: write
       pull-requests: write
@@ -69,4 +67,3 @@ jobs:
           command: release-pr
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}