From f76f672ebe1427be3241fdb74bbbad270afc2588 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 11 Apr 2026 15:04:28 +0000
Subject: [PATCH] fix(release): add id-token permission for OIDC and
 setup-python step

Agent-Logs-Url: https://github.com/OpenCyphal/pycyphal/sessions/354ba8b9-e395-40f0-ab05-2e18ed55dd19

Co-authored-by: pavel-kirienko <3298404+pavel-kirienko@users.noreply.github.com>
---
 .github/workflows/release.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b16a71b0..01f22064 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,9 +11,14 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write      # for creating tags
+      id-token: write      # for PyPI trusted publishing (OIDC)
     steps:
       - uses: actions/checkout@v6
 
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.x"
+
       - name: Extract version
         id: version
         run: |