From 1ff8082f4da50f01dc3beca3dacfe6598695f8b7 Mon Sep 17 00:00:00 2001 From: Fantix King Date: Wed, 30 Sep 2026 22:54:01 -0400 Subject: [PATCH 1/2] Use PyPI trusted publishing --- .github/workflows/release.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f0e52471..0f609f99 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -151,6 +151,9 @@ jobs: publish: needs: [build-sdist, build-wheels] runs-on: ubuntu-latest + permissions: + contents: write + id-token: write steps: - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 @@ -197,7 +200,4 @@ jobs: - name: Upload to PyPI uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 with: - user: __token__ - password: ${{ secrets.PYPI_TOKEN }} - # password: ${{ secrets.TEST_PYPI_TOKEN }} - # repository_url: https://test.pypi.org/legacy/ + verbose: true From f987cf612a1d54c5fd5d3ab8dc628bb53afad803 Mon Sep 17 00:00:00 2001 From: Fantix King Date: Thu, 1 Oct 2026 09:07:29 -0400 Subject: [PATCH 2/2] Remove unnecessary PyPI publish verbosity --- .github/workflows/release.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0f609f99..f919dd40 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -199,5 +199,3 @@ jobs: - name: Upload to PyPI uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 - with: - verbose: true