feat: use trusted publishing for pypi

.github/workflows/build.yml

@@ -143,6 +143,10 @@ jobs:
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
     needs: [build-source-distribution, build-manylinux-wheels]
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
 
     steps:
     - name: Download packages
@@ -154,7 +158,4 @@ jobs:
         find dist -type f -exec mv {} dist/ \;
         find dist/* -type d -exec rmdir {} \; || true
     - name: Publish package to PyPi
-      uses: pypa/[email protected]
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
+      uses: pypa/[email protected]

gutenTAG/_version.py

@@ -1 +1 @@
-__version__: str = "1.4.1"
+__version__: str = "1.4.2"