---

This section details on the original issue you should resolve

<issue_title>publishing workflow - update</issue_title>
<issue_description>No more token required, let's go with

name: Publish Python package to PyPI

on:
  push:
    tags:
      - "v*"
  release:
    types: [published]
  workflow_dispatch:

jobs:
  build-and-publish:
    runs-on: ubuntu-latest

    permissions:
      contents: read
      id-token: write   # REQUIRED for trusted publishing

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"

      - name: Install uv
        run: curl -LsSf https://astral.sh/uv/install.sh | sh

      - name: Install build backend
        run: |
          uv venv .venv
          source .venv/bin/activate
          uv pip install build

      - name: Build package
        run: |
          source .venv/bin/activate
          python -m build

      - name: Publish package to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
```</issue_description>

## Comments on the Issue (you are @copilot in this section)

<comments>
</comments>