From f6668b340f45b3747f1f338aa05963b4309f6457 Mon Sep 17 00:00:00 2001 From: zssherman Date: Wed, 3 Jun 2026 10:03:10 -0500 Subject: [PATCH 1/5] ENH: Update publishing method. --- .github/workflows/pypi-release.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml index 9247629af2..495776f03c 100644 --- a/.github/workflows/pypi-release.yml +++ b/.github/workflows/pypi-release.yml @@ -61,6 +61,10 @@ jobs: needs: test-built-dist if: github.event_name == 'release' runs-on: ubuntu-latest + environment: + name: pypi + permissions: + id-token: write steps: - uses: actions/download-artifact@v8 with: @@ -68,7 +72,3 @@ jobs: path: dist - name: Publish package to PyPI uses: pypa/gh-action-pypi-publish@v1.14.0 - with: - user: __token__ - password: ${{ secrets.PYPI_TOKEN }} - verbose: true From f9b80ab834844baf96c3703dff07524ccf4f9098 Mon Sep 17 00:00:00 2001 From: zssherman Date: Wed, 3 Jun 2026 10:05:30 -0500 Subject: [PATCH 2/5] MNT: Update code --- .github/workflows/pypi-release.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml index 495776f03c..9dae6a17e2 100644 --- a/.github/workflows/pypi-release.yml +++ b/.github/workflows/pypi-release.yml @@ -61,8 +61,7 @@ jobs: needs: test-built-dist if: github.event_name == 'release' runs-on: ubuntu-latest - environment: - name: pypi + environment: pypi permissions: id-token: write steps: From 9e7c770415150e3050bb76fc5da726f3d0d9ee85 Mon Sep 17 00:00:00 2001 From: zssherman Date: Wed, 3 Jun 2026 10:45:15 -0500 Subject: [PATCH 3/5] ENH: Add one more check. --- .github/workflows/pypi-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml index 9dae6a17e2..e586aa7044 100644 --- a/.github/workflows/pypi-release.yml +++ b/.github/workflows/pypi-release.yml @@ -59,7 +59,7 @@ jobs: ls -ltrh dist upload-to-pypi: needs: test-built-dist - if: github.event_name == 'release' + if: github.event_name == 'release' && github.repository == 'ARM-DOE/ACT' runs-on: ubuntu-latest environment: pypi permissions: From 5e1bff3775f39591cc9463f9e775d8161bde96a7 Mon Sep 17 00:00:00 2001 From: zssherman Date: Wed, 3 Jun 2026 13:35:51 -0500 Subject: [PATCH 4/5] FIX: Remove some redundency. --- .github/workflows/pypi-release.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml index e586aa7044..bef77e4db8 100644 --- a/.github/workflows/pypi-release.yml +++ b/.github/workflows/pypi-release.yml @@ -44,6 +44,7 @@ jobs: test-built-dist: needs: build-artifacts runs-on: ubuntu-latest + if: github.repository == 'ARM-DOE/ACT' steps: - uses: actions/setup-python@v6 name: Install Python @@ -59,7 +60,7 @@ jobs: ls -ltrh dist upload-to-pypi: needs: test-built-dist - if: github.event_name == 'release' && github.repository == 'ARM-DOE/ACT' + if: github.repository == 'ARM-DOE/ACT' runs-on: ubuntu-latest environment: pypi permissions: From 440429de9cad29dbb6f53cc29c6e2f2eab071925 Mon Sep 17 00:00:00 2001 From: zssherman Date: Wed, 3 Jun 2026 14:02:35 -0500 Subject: [PATCH 5/5] MNT: pypi enviroment handles check. --- .github/workflows/pypi-release.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml index bef77e4db8..e37a33f9ca 100644 --- a/.github/workflows/pypi-release.yml +++ b/.github/workflows/pypi-release.yml @@ -60,7 +60,6 @@ jobs: ls -ltrh dist upload-to-pypi: needs: test-built-dist - if: github.repository == 'ARM-DOE/ACT' runs-on: ubuntu-latest environment: pypi permissions: