From 6e6d95ab6c53501de37a7a8e6003c82b03f8d4a4 Mon Sep 17 00:00:00 2001
From: generall <andrey@vasnetsov.com>
Date: Wed, 21 Oct 2026 09:13:26 +0200
Subject: [PATCH] ci: run PyPI publish in release environment

Restricts PYPI_API_TOKEN to v* tag refs once it is moved to the
environment.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/python-publish.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 104545ec..de06a5b1 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -19,6 +19,7 @@ jobs:
   deploy:
 
     runs-on: ubuntu-latest
+    environment: release
 
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1