FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

CI: Use pypi trusted publisher for release by akrherz · Pull Request #203 · python-metar/python-metar · GitHub

/ python-metar Public

CI: Use pypi trusted publisher for release - #203

Merged
akrherz merged 4 commits into
python-metar:mainfrom
akrherz:gh200_pypi_trusted
Mar 20, 2026
ConversationCommits (4)ChecksFiles changed
Merged

CI: Use pypi trusted publisher for release#203
akrherz merged 4 commits into
python-metar:mainfrom
akrherz:gh200_pypi_trusted

Conversation

akrherz commented Mar 20, 2026

Copy link
Copy Markdown
Collaborator

closes #200

akrherz requested a review from Copilot March 20, 2026 13:01

akrherz commented Mar 20, 2026

Copy link
Copy Markdown
Collaborator Author

Unsure how to test this, but will see if copilot spots anything of concern...

Copilot AI reviewed Mar 20, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

Updates the GitHub Actions release workflow to publish to PyPI using OIDC/Trusted Publishing instead of a long-lived PyPI API token, addressing the 403 upload failure reported in #200.

Changes:

  • Adds PyPI environment configuration and enables id-token permissions for OIDC-based publishing.
  • Switches publishing to pypa/gh-action-pypi-publish@release/v1.
  • Introduces a step to mint a short-lived PyPI API token from the GitHub OIDC token and uses it for upload.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/release.yml
Comment thread .github/workflows/release.yml Outdated
Comment thread .github/workflows/release.yml Outdated
akrherz requested a review from Copilot March 20, 2026 13:10
Copilot AI reviewed Mar 20, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/release.yml Outdated
akrherz merged commit de36264 into python-metar:main Mar 20, 2026
6 checks passed
akrherz deleted the gh200_pypi_trusted branch March 20, 2026 14:07
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

pypi release workflow failed

2 participants

Back | FazBrowse Home | New Git URL