From 254b5a70267d6487b9b75ba5cdb73e7f84c2f953 Mon Sep 17 00:00:00 2001 From: Rohit Kumar Date: Mon, 20 Jul 2026 12:48:23 +0530 Subject: [PATCH 1/2] fix: add id-token write permission to publish workflow for PyPI OIDC --- .github/workflows/publish.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index d11136a..f3e8c0c 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -10,6 +10,7 @@ jobs: runs-on: ubuntu-latest permissions: contents: read + id-token: write steps: - name: Checkout code uses: actions/checkout@v6 From cfdf7861f3876432e9e6c9e8b93d1cafa9be584d Mon Sep 17 00:00:00 2001 From: Rohit Kumar Date: Mon, 20 Jul 2026 12:51:30 +0530 Subject: [PATCH 2/2] fix: use OIDC trusted publishing for PyPI, remove PYPI_API_TOKEN --- .github/workflows/publish.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f3e8c0c..506b2e5 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -34,5 +34,3 @@ jobs: - name: Publish distribution to PyPI uses: pypa/gh-action-pypi-publish@release/v1 - with: - password: ${{ secrets.PYPI_API_TOKEN }}