diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5b3f529..eade5aa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,8 @@ jobs:
   release:
     name: release
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Checkout commit and fetch tag history
         uses: actions/checkout@v2
@@ -25,10 +27,7 @@ jobs:
           python -m pip install --upgrade pip
           pip install setuptools wheel twine
 
-      - name: Build and publish package
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_AZAVEA_USERNAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_AZAVEA_PASSWORD }}
-        run: |
-          python setup.py sdist bdist_wheel
-          twine upload dist/*
+      - name: Upload release to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 745ea36..30d70f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [4.0.1] - 2024-04-15
+### Changed
+- Update PyPI Integration for Publishing [#36](https://github.com/azavea/django-ecsmanage/issues/36)
+
 ## [4.0.0] - 2024-01-05
 ### Changed
 - Return task ARN from the handle command [#34](https://github.com/azavea/django-ecsmanage/pull/34)