From 98176f53c88e51b82a562f1367b7a8bc5b5994f4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 2 Jul 2026 18:54:25 +0000
Subject: [PATCH 1/2] Initial plan


From 86463e5577cca0effc8b30a45bfb8a10dba0e850 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 2 Jul 2026 18:57:30 +0000
Subject: [PATCH 2/2] ci: set pypi environment for trusted publishing job

---
 .github/workflows/pypi.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index e83a537..dd2415e 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -12,6 +12,7 @@ permissions:
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
+    environment: pypi
     permissions:
       # Required for PyPI Trusted Publishing (OIDC) — lets GitHub publish without
       # any stored PyPI password or API token.