Trusted published, not PYPI_TOKEN

Author: simonw

README.md

@@ -22,6 +22,6 @@ The `test.yml` GitHub Actions workflow will run your tests automatically any tim
 
 The `publish.yml` Action runs when you create a new GitHub release. It can build and upload your package to [PyPI](https://pypi.org/).
 
-For this to work, you need to create an API token for your PyPI account and add that to your repository as a secret called `PYPI_TOKEN`.
+For this to work you need to create an account on PyPI and configure your new GitHub repository as a "trusted publisher".
 
 See [Publishing your library as a package to PyPI](https://github.com/simonw/python-lib#publishing-your-library-as-a-package-to-pypi) for details.