diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d743640..a1fba2d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,11 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: "https://pypi.org/p/cfgenvy"
+    permissions:
+      id-token: write
 
     steps:
       - name: checkout
@@ -19,7 +24,7 @@ jobs:
 
       - name: pre-release
         if: ${{ github.event.release.prerelease }}
-        uses: pypa/gh-action-pypi-publish@v1.5.0
+        uses: pypa/gh-action-pypi-publish@v1.9.0
         with:
           user: __token__
           password: ${{ secrets.TEST_PYPI_API_TOKEN }}
@@ -27,7 +32,7 @@ jobs:
 
       - name: release
         if: ${{ !github.event.release.prerelease }}
-        uses: pypa/gh-action-pypi-publish@v1.5.0
+        uses: pypa/gh-action-pypi-publish@v1.9.0
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}