Skip to content

ci: move to PyPy Trusted Publishing - #81

Open
qkaiser wants to merge 2 commits into
masterfrom
trusted-publishing
Open

qkaiser wants to merge 2 commits into
masterfrom
trusted-publishing

Conversation

@qkaiser

@qkaiser qkaiser commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Move to PyPi Trusted Publishing using an ID token instead of relying on a fixed token.

Split the release workflow in 3 steps:

  • build phase with uv, followed by an artifact upload
  • publication to PyPi by pulling built artifacts first
  • publications to Test PyPi by pulling built artifacts first

This follows official guidance from
https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/

@qkaiser qkaiser self-assigned this Aug 31, 2026
@qkaiser
qkaiser marked this pull request as draft August 31, 2026 09:33
@qkaiser
qkaiser marked this pull request as ready for review August 31, 2026 09:54
@qkaiser
qkaiser requested a review from martonilles August 31, 2026 10:00
@martonilles

Copy link
Copy Markdown
Contributor

looks good, but conflicts with recent publish fixes

Move to PyPi Trusted Publishing using an ID token instead of relying on
a fixed token.

Split the release workflow in 3 steps:
- build phase with poetry, followed by an artifact upload
- publication to PyPi by pulling built artifacts first
- publications to Test PyPi by pulling built artifacts first

This follows official guidance from
https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/
@qkaiser
qkaiser force-pushed the trusted-publishing branch 2 times, most recently from c8eeeaf to 21c0ec3 Compare September 14, 2026 07:51
Publish unique default-branch development builds to TestPyPI and gate
PyPI releases on authorized version tags.
@martonilles

Copy link
Copy Markdown
Contributor

One more thing as I am looking at the details, why do we need this ci: standardize package publishing. After looking at our other repos we do not do it there, what is the use-case here?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants