diff --git a/.openapi-generator-ignore b/.openapi-generator-ignore
index 7484ee5..8570bfd 100644
--- a/.openapi-generator-ignore
+++ b/.openapi-generator-ignore
@@ -21,3 +21,8 @@
 #docs/*.md
 # Then explicitly reverse the ignore rule for a single file:
 #!docs/README.md
+
+# pyproject.toml is hand-maintained: it uses setuptools_scm dynamic versioning
+# (PLAT-193) so releases derive their version from git tags. Regenerating it
+# would revert to a hardcoded version and silently break PyPI publishing.
+pyproject.toml
diff --git a/pyproject.toml b/pyproject.toml
index bfd1432..4bed9f2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "opal_security"
-version = "1.0.0"
+dynamic = ["version"]
 description = "Opal API"
 authors = [
   {name = "Opal Team",email = "hello@opal.dev"},
@@ -32,7 +32,7 @@ mypy = ">= 1.5"
 
 
 [build-system]
-requires = ["setuptools"]
+requires = ["setuptools", "setuptools_scm"]
 build-backend = "setuptools.build_meta"
 
 [tool.pylint.'MESSAGES CONTROL']