Skip to content

Use Trusted publishing for release action #372

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ppinchuk merged 4 commits into from
Jan 28, 2026
+93 −597
Merged

Use Trusted publishing for release action #372

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ae72c86
No more twine
ppinchuk Jan 27, 2026
f91eb43
Use Trusted publisher to release wheels
ppinchuk Jan 27, 2026
8426ec7
Fix typos
ppinchuk Jan 27, 2026
4bbdb9c
Update lockfile
ppinchuk Jan 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 7 additions & 5 deletions .github/workflows/publish_to_pypi.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,8 @@ jobs:
deploy:
name: Build and upload wheels
permissions:
# IMPORTANT: write permission is mandatory for Trusted Publishing
id-token: write
contents: read
runs-on: ubuntu-latest
if: startsWith(github.ref, 'refs/tags/v')
Expand All @@ -26,8 +28,8 @@ jobs:
cache: false
environments: pbuild

- name: Build and publish
env:
TWINE_USERNAME: __token__
TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
run: pixi run -e pbuild upload-wheels
- name: Build
run: pixi run -e pbuild build-wheels

- name: Publish package distributions to PyPI
uses: pypa/gh-action-pypi-publish@release/v1
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ RUN pixi run --frozen -e pbuild build-wheels
# RUN pixi add --frozen pip
# RUN pixi run --frozen -e ${PIXI_ENV} \
# python3 -m pip install --no-deps --disable-pip-version-check \
# dist/infra__compass-*.whl
# dist/infra_compass-*.whl
# Do we want to remove pip to reduce production's size?
# RUN pixi remove --frozen -e ${PIXI_ENV} pip

Expand Down
2 changes: 1 addition & 1 deletion docs/source/dev/README.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -407,5 +407,5 @@ Copilot
This repo hosts a custom set of instructions for GitHub Copilot to help it write
code aligned with COMPASS best practices. You can check out these instructions
`here <https://github.com/NatLabRockies/COMPASS/blob/main/.github/copilot-instructions.md>`_
(they may help your as well!). If you have any suggestions on how to improve these
(they may help you as well!). If you have any suggestions on how to improve these
instructions, please open a PR!
2 changes: 1 addition & 1 deletion examples/execution_basics/README.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,7 +112,7 @@ Omit the ``pytesseract_exe_fp`` key to disable OCR functionality.
Kitchen Sink Config
-------------------

In `config_kitchen_sink.json5 <https://github.com/NatLabRockies/COMPASS/blob/main/examples/execution_basics/config_recommended.json5>`_,
In `config_kitchen_sink.json5 <https://github.com/NatLabRockies/COMPASS/blob/main/examples/execution_basics/config_kitchen_sink.json5>`_,
we show what a configuration might look like that utilizes all available parameters.

.. literalinclude:: config_kitchen_sink.json5
Expand Down
Loading