cicd: fix release (maybe) (#18)

.github/workflows/release.yaml

@@ -1,19 +1,8 @@
-# This file is autogenerated by maturin v1.7.4
-# To update, run
-#
-#    maturin generate-ci github
-#
 name: Release
 
 on:
-  push:
-    branches:
-      - main
-      - master
-    tags:
-      - '*'
-  pull_request:
-  workflow_dispatch:
+  release:
+    types: [created]
 
 permissions:
   contents: read
@@ -157,7 +146,9 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
-    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
+    environment:
+      name: pypi
+      url: https://pypi.org/p/vrsix
     needs: [
       linux,
       # musllinux,
@@ -166,11 +157,8 @@ jobs:
       sdist
     ]
     permissions:
-      # Use to sign the release artifacts
       id-token: write
-      # Used to upload release artifacts
       contents: write
-      # Used to generate artifact attestation
       attestations: write
     steps:
       - uses: actions/download-artifact@v4
@@ -181,8 +169,6 @@ jobs:
       - name: Publish to PyPI
         if: "startsWith(github.ref, 'refs/tags/')"
         uses: PyO3/maturin-action@v1
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
         with:
           command: upload
           args: --non-interactive --skip-existing wheels-*/*