Tags: modern-python/lite-bootstrap
Tags
ci: publish to PyPI via Trusted Publishing (OIDC) (#145) * ci: publish to PyPI via Trusted Publishing (OIDC) Drop the long-lived PYPI_TOKEN secret in favor of OIDC. uv publish auto-detects the GitHub Actions id-token, so the release job grants id-token: write and runs under a `pypi` environment that scopes the PyPI Trusted Publisher. Requires a matching Trusted Publisher on the lite-bootstrap PyPI project (workflow: release.yml, environment: pypi) before the next tag. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> * docs(release): add 1.2.3 notes (Trusted Publishing pipeline) Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> --------- Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
chore: lift fastapi<0.137 cap; require instrumentator>=8.0.1 (#133) The cap (1.1.1) existed only because prometheus-fastapi-instrumentator <=8.0.0 crashed on FastAPI 0.137's _IncludedRouter. Fixed upstream in instrumentator 8.0.1 (issue #370). Remove fastapi<0.137 and raise the fastapi-metrics floor to >=8.0.1 so the fix is guaranteed wherever metrics are installed. Verified against FastAPI 0.138.0 + instrumentator 8.0.2: full suite green at 100%. Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
PreviousNext