From c180ead8e1b05be82a8eff099efdba026f46571f Mon Sep 17 00:00:00 2001 From: Gavin Peacock Date: Thu, 27 Mar 2025 13:45:22 -0700 Subject: [PATCH 1/3] chore: repair publishing process --- .github/workflows/build.yml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 90fbf91..bcc5154 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -365,15 +365,14 @@ jobs: runs-on: ubuntu-latest environment: Publish needs: [linux, windows, macos_x86, macos_aarch64, sdist] + permissions: + # IMPORTANT: this permission is mandatory for Trusted Publishing + id-token: write steps: - uses: actions/download-artifact@v4 with: pattern: wheels-* name: wheels - name: Publish to PyPI - uses: PyO3/maturin-action@v1 - env: - MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }} - with: - command: upload - args: --non-interactive --skip-existing * + uses: pypa/gh-action-pypi-publish@release/v1 + From 856dd1d7d851fa58ffc1791ec2d2c95dcbdeda50 Mon Sep 17 00:00:00 2001 From: Gavin Peacock Date: Thu, 27 Mar 2025 14:55:43 -0700 Subject: [PATCH 2/3] chore: update release workflow --- .github/workflows/build.yml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index bcc5154..35e99eb 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -369,10 +369,16 @@ jobs: # IMPORTANT: this permission is mandatory for Trusted Publishing id-token: write steps: + - uses: actions/checkout@v4 - uses: actions/download-artifact@v4 with: pattern: wheels-* - name: wheels - - name: Publish to PyPI + path: dist + merge-multiple: true + - name: List contents of dist directory + run: ls -la dist/ + - name: Publish to PyPi uses: pypa/gh-action-pypi-publish@release/v1 + with: + packages_dir: dist From 05a1a540667eae514f4a3cdb588f6ebd0454a472 Mon Sep 17 00:00:00 2001 From: Gavin Peacock Date: Thu, 27 Mar 2025 15:31:36 -0700 Subject: [PATCH 3/3] chore: yet another publish attempt --- .github/workflows/build.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 35e99eb..4054a07 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -381,4 +381,6 @@ jobs: uses: pypa/gh-action-pypi-publish@release/v1 with: packages_dir: dist + username: __token__ + password: ${{ secrets.PYPI_TOKEN }}