Enable trusted publishing (#471)

Emily Voss · web-flow · commit de18251943d0 · 2026-02-12T16:54:27.000-08:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -46,8 +46,6 @@ jobs:
 
     - name: Publish to PyPI
       uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
 
     # Best-effort: attempt Azure upload even if PyPI fails, but only if build succeeded.
     # continue-on-error allows the workflow to pass when Azure secrets are not configured.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,8 @@
+## 1.5.2
+
+### Fix
+- Switch to PyPI trusted publishing (OIDC) and remove API token auth
+
 ## 1.5.1
 
 ### Fix
diff --git a/unstructured_inference/__version__.py b/unstructured_inference/__version__.py
@@ -1 +1 @@
-__version__ = "1.5.1"  # pragma: no cover
+__version__ = "1.5.2"  # pragma: no cover
diff --git a/uv.lock b/uv.lock
