From 965dfe8d9c7cb78d3bab9058cf38eafccaf27ab3 Mon Sep 17 00:00:00 2001 From: James Gaboardi Date: Fri, 12 Dec 2025 12:03:43 -0500 Subject: [PATCH 1/2] empty commit for v1.1.10.post2 From c8c98d213b95ab3e1a400cc3bbf3e6c59727d628 Mon Sep 17 00:00:00 2001 From: James Gaboardi Date: Fri, 12 Dec 2025 12:49:42 -0500 Subject: [PATCH 2/2] #94 - PyPI trusted publishing --- .github/workflows/upload_package.yml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/upload_package.yml b/.github/workflows/upload_package.yml index 3132fd6..60ebacd 100644 --- a/.github/workflows/upload_package.yml +++ b/.github/workflows/upload_package.yml @@ -14,8 +14,13 @@ on: required: false jobs: - build: + build-n-publish: + name: Build and publish neatnet to PyPI runs-on: ubuntu-latest + permissions: + id-token: write # MANDATORY for trusted publishing to PyPI + contents: write # MANDATORY for the Github release action + steps: - uses: actions/checkout@v4 with: @@ -28,6 +33,7 @@ jobs: - name: Build source and wheel distributions run: | + python -m pip install --upgrade pip python -m pip install --upgrade build twine python -m build twine check --strict dist/* @@ -44,6 +50,3 @@ jobs: - name: Publish distribution 📦 to PyPI uses: pypa/gh-action-pypi-publish@release/v1 - with: - user: __token__ - password: ${{ secrets.PYPI_PASSWORD }}