diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b16a71b0..01f22064 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,9 +11,14 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write      # for creating tags
+      id-token: write      # for PyPI trusted publishing (OIDC)
     steps:
       - uses: actions/checkout@v6
 
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.x"
+
       - name: Extract version
         id: version
         run: |