Skip to content

REL: rewrite publishing workflow to use trusted publishers instead of a long lived API token - #73

Merged
astrofrog merged 1 commit into
astropy:mainfrom
neutrinoceros:rel/trusted-publishing
Oct 20, 2026
Merged

astrofrog merged 1 commit into
astropy:mainfrom
neutrinoceros:rel/trusted-publishing

Conversation

@neutrinoceros

@neutrinoceros neutrinoceros commented May 28, 2026 •

Copy link
Copy Markdown
Contributor

Fix #19
This requires an intervention from a PyPI maintainer as well as a repo owner.
Double ping @astrofrog + @astrofrog :D

@neutrinoceros
neutrinoceros force-pushed the rel/trusted-publishing branch from 02cc858 to 2263431 Compare May 28, 2026 12:51
@pllim

pllim commented Jun 1, 2026

Copy link
Copy Markdown
Member

Would this solve #74 ?

@neutrinoceros

Copy link
Copy Markdown
Contributor Author

No. It's a completely orthogonal issue.

@astrofrog astrofrog left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a change below, also I'd recommend rebasing to get the latest version of the workflows. I'll look into the PyPI-side work now.

@astrofrog

Copy link
Copy Markdown
Member

Ok I've done what I need on the PyPI side and created a GitHub environment

@neutrinoceros
neutrinoceros force-pushed the rel/trusted-publishing branch from aa7611e to dfc8934 Compare October 20, 2026 12:32
@neutrinoceros

Copy link
Copy Markdown
Contributor Author

suggestion applied and branch rebased

@neutrinoceros
neutrinoceros marked this pull request as ready for review October 20, 2026 12:33
@astrofrog
astrofrog merged commit 128eb67 into astropy:main Oct 20, 2026
12 checks passed
@neutrinoceros
neutrinoceros deleted the rel/trusted-publishing branch October 20, 2026 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

PyPI wants us to use trusted publishing

3 participants