diff --git a/planning/releases/2.8.1.md b/planning/releases/2.8.1.md
new file mode 100644
index 0000000..14de60c
--- /dev/null
+++ b/planning/releases/2.8.1.md
@@ -0,0 +1,11 @@
+# modern-di-fastapi 2.8.1 — release pipeline on PyPI Trusted Publishing
+
+No library changes. The package is identical to 2.8.0; this release exercises the new publish path end-to-end.
+
+## CI
+
+- Releases now authenticate to PyPI via **Trusted Publishing (OIDC)** instead of a long-lived `PYPI_TOKEN` secret. `uv publish` auto-detects the GitHub Actions id-token; the release job runs under a `pypi` environment that scopes the trusted publisher (#25).
+
+## Downstream
+
+No action required. Nothing about the installed package changes.