Skip to content

refactor: replace PyPI publish with git tag, use GITHUB_OUTPUT in release-github#46

Merged
tehw0lf merged 1 commit intomainfrom
refactor/pypi-trusted-publishing-via-git-tag
Mar 15, 2026
Merged

refactor: replace PyPI publish with git tag, use GITHUB_OUTPUT in release-github#46
tehw0lf merged 1 commit intomainfrom
refactor/pypi-trusted-publishing-via-git-tag

Conversation

@tehw0lf
Copy link
Owner

@tehw0lf tehw0lf commented Mar 15, 2026

Summary

  • publish-python-libraries: replaces uv publish with an idempotent git tag step — repos now trigger their own local publish workflow on tag push, enabling PyPI Trusted Publishing from the calling repo's OIDC context
  • release-github: migrates from $GITHUB_ENV / env.RELEASE_TAG to $GITHUB_OUTPUT / steps.extract_version.outputs.release_tag for cleaner, statically-resolvable step output passing

Test plan

  • Push to a uv repo with publish_github_release: true — verify tag is set and release is created as before
  • Push to a uv repo without publish_github_release — verify tag is set by publish-python-libraries and triggers local publish workflow
  • Verify idempotency: re-run with existing tag — job should skip without error

…es, use GITHUB_OUTPUT in release-github

publish-python-libraries now sets a git tag (idempotent) instead of publishing directly,
enabling repos to trigger their own trusted publishing workflow on tag push.
release-github migrated from GITHUB_ENV to GITHUB_OUTPUT for cleaner step output passing.
@tehw0lf tehw0lf merged commit ff58421 into main Mar 15, 2026
2 checks passed
@tehw0lf tehw0lf deleted the refactor/pypi-trusted-publishing-via-git-tag branch March 15, 2026 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant