minor fix ci

Author: s0urfruit

.github/workflows/release.yaml

@@ -35,31 +35,29 @@ jobs:
         with:
           files: ./dist/*
 
-  publish:
-    if: startsWith(github.ref, 'refs/tags/v')
-    name: Publish package to PyPI
-    runs-on: ubuntu-latest
-    environment: release
-    # Trusted publishing doesn't support reusable workflows yet
-    # permissions:
-    #   id-token: write
-    steps:
-      - name: Download sdist artifact
-        uses: actions/download-artifact@v6
-        with:
-          name: sdist
-          path: ./dist
-
-      - name: Download wheels artifact
-        uses: actions/download-artifact@v6
-        with:
-          name: wheels
-          path: ./dist
+    publish:
+      if: startsWith(github.ref, 'refs/tags/v')
+      name: Publish package to PyPI
+      runs-on: ubuntu-latest
+      environment: release
+      steps:
+        - name: Download sdist artifact
+          uses: actions/download-artifact@v6
+          with:
+            name: sdist
+            path: ./dist
+  
+        - name: Download wheels artifact
+          uses: actions/download-artifact@v6
+          with:
+            name: wheels
+            path: ./dist
+  
+        - name: Upload distributions to PyPI
+          uses: pypa/gh-action-pypi-publish@release/v1
+          with:
+            user: __token__
+            password: ${{ secrets.PYPI_TOKEN }}
+            skip-existing: true
+            attestations: false
 
-      - name: Upload distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_TOKEN }}
-          skip-existing: true
-          # Why did PyPI enable this experimental feature by default?
-          attestations: false