Skip to content

Publish an existing release tag through the trusted workflow - #20

Merged
trissim merged 1 commit into
mainfrom
fix/existing-tag-publisher-dispatch-20261004
Oct 4, 2026
Merged

trissim merged 1 commit into
mainfrom
fix/existing-tag-publisher-dispatch-20261004

Conversation

@trissim

@trissim trissim commented Oct 4, 2026

Copy link
Copy Markdown
Contributor

Adds a required existing release-tag input to the original publisher. One selected tag supplies checkout and GitHub Release identity; build, twine, PyPI OIDC publisher and ordinary tag-push path remain unchanged. Recovers the retained v1.2.0 tag (reviewed source 27dbe36), whose coverage-badge skip-ci commit suppressed the push workflow. No retagging, version change, alternate uploader or installed-prefix mutation. Local YAML semantic checks verified both event paths, exact reviewed tag source and unchanged original publisher steps. Publication receiving follows after merge; no publication success claimed yet.

@trissim
trissim marked this pull request as ready for review October 4, 2026 20:35
Copilot AI balanced review requested due to automatic review settings October 4, 2026 20:35
@trissim
trissim merged commit 8faaec2 into main Oct 4, 2026
11 checks passed

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@trissim

trissim commented Oct 4, 2026

Copy link
Copy Markdown
Contributor Author

Actual receiving complete: merged8faaec2, dispatched the original trusted publisher ONCE for retained v1.2.0. Workflow37232723893 completed SUCCESS including PyPI upload. Checkout log confirms reviewed source27dbe365. Official PyPI wheel SHA3c806d364564e72ee461e8609b56ae8fd277e15be70392591c647d6bb4b67786 and sdist SHA3c846086b0071ffc3c8e2b6244f1425b71649675c30791f89d5a6775df537f26 exactly match qualified local artifacts, whose27 Python members matched reviewed source and installed target. Annotated tag unchanged. No retry, alternate uploader or shared installation change. OpenHCS native3D receiving remains separate #663 work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants