chore: update workflow to not change permission of token #108

	name: Release

	on:
	push:
	branches:
	- main

	jobs:

	release:
	name: Update changelog, create github release and store package
	runs-on: ubuntu-latest

	if: "!contains(github.event.head_commit.message, 'chore:')" # Skip if "chore:" is in the commit message

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Install Poetry
	run: \|
	curl -sSL https://install.python-poetry.org \| python3 -
	export PATH="$HOME/.local/bin:$PATH"

	- name: Set up Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '21'

	- name: Install semantic-release
	run: npm install -g semantic-release @semantic-release/changelog @semantic-release/git @semantic-release/exec

	- name: Run semantic-release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	POETRY_PYPROJECT: pyproject.toml
	run: \|
	semantic-release

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.11.9'

	- name: Install dependencies
	run: poetry install

	- name: Package
	run: poetry build

	- name: Store the distribution packages
	uses: actions/upload-artifact@v4
	with:
	name: python-package-distributions
	path: dist/


	publish-to-pypi:
	name: Publish to pypi
	runs-on: ubuntu-latest

	needs:
	- release

	environment:
	name: pypi
	url: https://pypi.org/p/pocker-tui

	permissions:
	id-token: write # IMPORTANT: mandatory for trusted publishing

	steps:
	- name: Download all the dists
	uses: actions/download-artifact@v4
	with:
	name: python-package-distributions
	path: dist/

	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback