Fix release pipeline (#378)

Author: corydolphin

.github/workflows/on-release-main.yml

@@ -28,10 +28,15 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: pyproject-toml
-          path: pyproject.toml
+          path: |
+            pyproject.toml
+            flask_cors/version.py
 
   publish:
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write # this permission is mandatory for trusted publishing
     needs: [set-version]
     steps:
       - name: Check out
@@ -44,12 +49,13 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: pyproject-toml
-
+      - name: Cat files
+        run: cat pyproject.toml && cat flask_cors/version.py
       - name: Build package
         run: uv build
 
       - name: Publish package
-        run: uv publish
+        run: uv publish --trusted-publishing
 
   deploy-docs:
     needs: publish