From 86909166375a7a7d640dad462a4ca57cbee5dbd3 Mon Sep 17 00:00:00 2001
From: ytkimirti <yusuftaha9@gmail.com>
Date: Thu, 22 Oct 2026 13:20:41 +0300
Subject: [PATCH] Publish via PyPI trusted publishing, anchor sdist includes

---
 .github/workflows/release.yml | 3 ++-
 pyproject.toml                | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8471ca9..42d299d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,6 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: astral-sh/setup-uv@v6
@@ -14,7 +15,7 @@ jobs:
       - run: uv run ruff check . && uv run ruff format --check . && uv run mypy upstash_blob
       - run: uv run pytest tests/unit
       - run: uv build
-      - run: uv publish --token "${{ secrets.PYPI_TOKEN }}"
+      - run: uv publish
       - name: Create GitHub release
         env:
           GH_TOKEN: ${{ github.token }}
diff --git a/pyproject.toml b/pyproject.toml
index 7c5e777..cc1cb25 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -50,7 +50,7 @@ requires = ["hatchling"]
 build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.sdist]
-include = ["upstash_blob", "README.md", "LICENSE"]
+include = ["/upstash_blob", "/README.md", "/LICENSE"]
 
 [tool.uv]
 exclude-newer = "7 days"