Merge pull request #145 from oscarbenjamin/pr_trusted_publisher

Trusted publisher ...

Author: oscarbenjamin

.github/workflows/release.yml

@@ -39,7 +39,7 @@ jobs:
       - name: Detect and tag new version
         id: check-version
         if: steps.check-parent-commit.outputs.sha
-        uses: salsify/action-detect-and-tag-new-version@v2.0.3
+        uses: salsify/action-detect-and-tag-new-version@v2
         with:
           version-command: |
             hatch version
@@ -86,6 +86,11 @@ jobs:
     steps:
       - run: echo "Tag = ${{ needs.tag-and-build.outputs.tag }}"
 
+      - name: Download release artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: release-artifacts
+
       - name: Publish package on PyPI
         if: needs.tag-and-build.outputs.tag
         uses: pypa/gh-action-pypi-publish@release/v1
@@ -94,4 +99,4 @@ jobs:
         if: "! needs.tag-and-build.outputs.tag"
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          repository_url: https://test.pypi.org/legacy/
+          repository-url: https://test.pypi.org/legacy/