Skip to content

Restore trusted PyPI publishing - #33

Merged
samarth1412 merged 1 commit into
mainfrom
agent/restore-pypi-oidc
Jul 22, 2026
Merged

Restore trusted PyPI publishing#33
samarth1412 merged 1 commit into
mainfrom
agent/restore-pypi-oidc

Conversation

@samarth1412

Copy link
Copy Markdown
Owner

What changed

  • Restore OIDC trusted publishing for production PyPI.
  • Remove the temporary API-token input from the release workflow.
  • Re-enable PyPI attestations.

Why

The production trusted publisher is now configured and successfully published
ContextTrace 1.1.0 from the immutable v1.1.0 tag. Future releases should use
short-lived OIDC credentials instead of a long-lived repository secret.

Validation

  • The v1.1.0 OIDC publish completed successfully.
  • Workflow YAML parses successfully.
  • The diff restores the release configuration tested by the successful tagged
    release.

@samarth1412
samarth1412 merged commit c67e8ca into main Jul 22, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant