From f442fbd3436a10d149c828e9e473b3032713db2b Mon Sep 17 00:00:00 2001 From: ubaskota <19787410+ubaskota@users.noreply.github.com> Date: Thu, 21 May 2026 16:56:10 -0400 Subject: [PATCH 1/4] Test publishing --- .github/workflows/release.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/workflows/release.yml diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml new file mode 100644 index 0000000000..a4419fa3d7 --- /dev/null +++ b/.github/workflows/release.yml @@ -0,0 +1,30 @@ +name: Publish to TestPyPI + +on: + workflow_dispatch: + +jobs: + publish: + runs-on: ubuntu-latest + environment: pypi + permissions: + id-token: write + steps: + - uses: actions/checkout@v4 + with: + persist-credentials: false + + - uses: actions/setup-python@v5 + with: + python-version: "3.x" + + - name: Install build + run: python -m pip install build + + - name: Build distributions + run: python -m build + + - name: Publish to TestPyPI + uses: pypa/gh-action-pypi-publish@release/v1 + with: + repository-url: https://test.pypi.org/legacy/ From d007c6a3a382a0cf539d4b87f9a33c1a87de64b2 Mon Sep 17 00:00:00 2001 From: ubaskota <19787410+ubaskota@users.noreply.github.com> Date: Thu, 21 May 2026 17:15:55 -0400 Subject: [PATCH 2/4] test - replace version number with a sha --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a4419fa3d7..a32af9e047 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,11 +10,11 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: persist-credentials: false - - uses: actions/setup-python@v5 + - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 with: python-version: "3.x" @@ -25,6 +25,6 @@ jobs: run: python -m build - name: Publish to TestPyPI - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1.14.0 with: repository-url: https://test.pypi.org/legacy/ From ffbf4081083eda448aead75dc265e6a4f06e2ca0 Mon Sep 17 00:00:00 2001 From: ubaskota <19787410+ubaskota@users.noreply.github.com> Date: Thu, 21 May 2026 17:22:36 -0400 Subject: [PATCH 3/4] remove env --- .github/workflows/release.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a32af9e047..b067e12b54 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -6,7 +6,6 @@ on: jobs: publish: runs-on: ubuntu-latest - environment: pypi permissions: id-token: write steps: From d0a5e2875b0f3f79fba1dc2f0265c1d69ff74485 Mon Sep 17 00:00:00 2001 From: ubaskota <19787410+ubaskota@users.noreply.github.com> Date: Tue, 26 May 2026 12:16:34 -0400 Subject: [PATCH 4/4] Add GitHub Actions workflow for PyPI trusted publishing --- .github/workflows/release.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b067e12b54..5271951836 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,4 +1,4 @@ -name: Publish to TestPyPI +name: Publish to PyPI on: workflow_dispatch: @@ -6,6 +6,7 @@ on: jobs: publish: runs-on: ubuntu-latest + environment: pypi permissions: id-token: write steps: @@ -23,7 +24,8 @@ jobs: - name: Build distributions run: python -m build - - name: Publish to TestPyPI + - name: Publish to PyPI uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1.14.0 with: - repository-url: https://test.pypi.org/legacy/ + repository-url: https://upload.pypi.org/legacy/ + skip-existing: true