From 5c7b36bc3266ee170c67ae5d84ac746fcc7bd4c1 Mon Sep 17 00:00:00 2001 From: Loganaden Velvindron Date: Wed, 14 Jan 2026 10:31:27 +0400 Subject: [PATCH 1/3] Update PyPI publish action to version 11 --- .github/workflows/python-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml index b7a704b..dce7637 100644 --- a/.github/workflows/python-publish.yml +++ b/.github/workflows/python-publish.yml @@ -33,7 +33,7 @@ jobs: - name: Build package run: python -m build - name: Publish package - uses: pypa/gh-action-pypi-publish@27b31702a0e7fc50959f5ad993c78deac1bdfc29 + uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa with: user: __token__ password: ${{ secrets.PYPI_API_TOKEN }} From 5bfc4ac3ee80b26dc66e28aeb84f2ac06969f9bf Mon Sep 17 00:00:00 2001 From: Loganaden Velvindron Date: Wed, 14 Jan 2026 10:37:25 +0400 Subject: [PATCH 2/3] Use trusted publishing --- .github/workflows/python-publish.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml index dce7637..155b8d1 100644 --- a/.github/workflows/python-publish.yml +++ b/.github/workflows/python-publish.yml @@ -14,6 +14,7 @@ on: permissions: contents: read + id-token: write # Required for OIDC jobs: deploy: From d96f04b5075cbe024783605b95429fcc7b5fa745 Mon Sep 17 00:00:00 2001 From: Loganaden Velvindron Date: Wed, 14 Jan 2026 10:54:57 +0400 Subject: [PATCH 3/3] Eliminate username/password API-based token --- .github/workflows/python-publish.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml index 155b8d1..c09ce13 100644 --- a/.github/workflows/python-publish.yml +++ b/.github/workflows/python-publish.yml @@ -35,6 +35,3 @@ jobs: run: python -m build - name: Publish package uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa - with: - user: __token__ - password: ${{ secrets.PYPI_API_TOKEN }}