diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 2a3e26d..5e0452a 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -51,7 +51,8 @@ pypi-twine:
     - pip install build twine
     - python -m build
     - twine check dist/*
-    # --trusted-publishing never: twine 6 defaults to attempting OIDC
-    # when it detects GitLab CI, even if TWINE_USERNAME/TWINE_PASSWORD
-    # are set. Explicitly disable OIDC so it uses the env vars directly.
-    - twine upload --non-interactive --trusted-publishing never dist/*
+    # Twine 6 prefers Trusted Publishing IF TWINE_USERNAME/TWINE_PASSWORD
+    # are unset. With both set, classic auth is used directly. If the
+    # diagnostic above shows MISSING, fix the group var Protected flag
+    # or mark tags as Protected refs on the python/ group.
+    - twine upload --non-interactive dist/*
diff --git a/erldistpy/__init__.py b/erldistpy/__init__.py
index ccb7a08..f521c72 100644
--- a/erldistpy/__init__.py
+++ b/erldistpy/__init__.py
@@ -1,6 +1,6 @@
 """erldistpy — native Python client for our Erlang distribution protocol."""
 
-__version__ = "0.1.5"
+__version__ = "0.1.6"
 
 from erldistpy.channel import Channel, ChannelError, IncomingMessage
 from erldistpy.epmd import EpmdError, EpmdInfo, lookup
diff --git a/pyproject.toml b/pyproject.toml
index 96e3242..f3bf846 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "erldistpy"
-version = "0.1.5"
+version = "0.1.6"
 description = "Native Python client for Erlang distribution protocol — EPMD + v6 handshake + gen_server call(), no asyncio."
 readme = { file = "README.md", content-type = "text/markdown" }
 requires-python = ">=3.10"