Use trusted publisher for release

- see https://docs.pypi.org/trusted-publishers/

Author: mrbean-bremen

.github/workflows/release-deploy.yml

@@ -8,6 +8,9 @@ jobs:
 
   deploy:
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
     strategy:
       fail-fast: true
       matrix:
@@ -29,6 +32,3 @@ jobs:
 
     - name: Publish package to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_TOKEN }}

CHANGES.md

@@ -12,6 +12,11 @@ The released versions correspond to PyPI releases.
 * the default for `FakeFilesystem.shuffle_listdir_results` will change to `True` to reflect
   the real filesystem behavior
 
+## Unreleased
+
+### Infrastructure
+* use trusted publisher for release (see https://docs.pypi.org/trusted-publishers/)
+
 ## [Version 5.7.1](https://pypi.python.org/pypi/pyfakefs/5.7.1) (2024-08-13)
 Fixes a regression in version 5.7.0 that broke patching fcntl.