diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index 2f4db4a..ad1286d 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -129,6 +129,11 @@ jobs:
     runs-on: ubuntu-latest
     if: (github.event_name == 'release' && startsWith(github.ref, 'refs/tags')) || (github.event_name == 'workflow_dispatch')
     needs: [build_wheels, build_sdist]
+    environment:
+      name: pypi
+      url: https://pypi.org/p/nbstripout-fast
+    permissions:
+      id-token: write
     steps:
       - name: Retrieve wheels and sdist
         uses: actions/download-artifact@v3
@@ -138,7 +143,7 @@ jobs:
           ls -lAs wheels/
 
       - name: Upload to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1.5
+        uses: pypa/gh-action-pypi-publish@release/v1.8
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}
           packages_dir: wheels/