ci: Configure publisher permissions for pypi

.github/workflows/argilla-v1.yml

@@ -5,9 +5,6 @@ concurrency:
   cancel-in-progress: true
 
 on:
-  workflow_dispatch:
-  workflow_call:
-
   push:
     paths:
       - argilla-v1/**
@@ -116,6 +113,15 @@ jobs:
   publish_release:
     name: Publish Release
     runs-on: ubuntu-latest
+    # if: ${{ github.event_name == 'release' }}
+
+    permissions:
+      # This permission is needed for private repositories.
+      # contents: read
+      # IMPORTANT: this permission is mandatory for trusted publishing on PyPI
+      id-token: write
+      # This permission is needed for creating tags
+      contents: write
 
     needs:
       - build
@@ -137,15 +143,10 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         continue-on-error: true
         with:
-          user: __token__
-          password: ${{ secrets.AR_TEST_PYPI_API_TOKEN }}
-          repository_url: https://test.pypi.org/legacy/
+          repository-url: https://test.pypi.org/legacy/
       - name: Test Installing 🍿
         continue-on-error: true
         run: pip install --index-url https://test.pypi.org/simple --no-deps  $PACKAGE_NAME==$PACKAGE_VERSION
       - name: Publish Package to PyPI 🥩
         uses: pypa/gh-action-pypi-publish@release/v1
         if: ${{ github.event_name == 'release' }}
-        with:
-          user: __token__
-          password: ${{ secrets.AR_PYPI_API_TOKEN }}