Switch to openconnect auth

.github/workflows/python-release.yml

@@ -6,7 +6,7 @@ on:
       - '*'
 
 jobs:
-  build:
+  release-build:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repository
@@ -35,7 +35,25 @@ jobs:
       run: poetry install --no-interaction --no-root --all-extras
     - name: Install library
       run: poetry install --no-interaction --all-extras
-    - name: Publish to PyPI
+    - name: Build release distributions
       run: |
-        poetry config pypi-token.pypi ${{ secrets.PYPI_TOKEN }}
-        poetry publish --build
+        poetry build
+    - name: Upload dists
+      uses: actions/upload-artifact@v4
+      with:
+        name: release-dists
+        path: dist/
+  pypi-publish:
+    runs-on: ubuntu-latest
+    needs:
+      - release-build
+    permissions:
+      id-token: write
+    steps:
+      - name: Retrieve release distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: release-dists
+          path: dist/
+      - name: Publish release distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1