Merge pull request #374 from plotly/trusted-publisher

Use Trusted Publisher rather than API keys

Author: ndrezn

.github/workflows/publish.yml

@@ -30,9 +30,7 @@ jobs:
           path: dist/
       - name: Publish package distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
-      
+        
       - name: Download npm package
         uses: actions/download-artifact@v4
         with:
@@ -50,4 +48,4 @@ jobs:
           popd
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        shell: bash
+        shell: bash