From c00a72a5410678e2c10f5e6a563ae0457b37c6cf Mon Sep 17 00:00:00 2001
From: Kam <oss@0state.com>
Date: Thu, 24 Sep 2026 00:32:49 +1000
Subject: [PATCH] Authenticate PyPI releases

---
 .github/workflows/release.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fa827da..0745107 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,8 +27,10 @@ jobs:
       - name: Check tag and package version
         run: test "${GITHUB_REF_NAME#v}" = "$(python -c 'import mailschema; print(mailschema.__version__)')"
       - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0
+        with:
+          user: __token__
+          password: ${{ secrets.PYPI_API_TOKEN }}
       - name: Publish GitHub release
         run: gh release create "$GITHUB_REF_NAME" --generate-notes dist/*
         env:
           GH_TOKEN: ${{ github.token }}
-