Skip to content

fix(ci): bind the publish index to the deployment environment and allow production PyPI only from release tags - #88

Merged
chad-loder merged 2 commits into
mainfrom
fix/publish-index-guard
Oct 8, 2026
Merged

chad-loder merged 2 commits into
mainfrom
fix/publish-index-guard

Conversation

@chad-loder

@chad-loder chad-loder commented Oct 8, 2026 •

Copy link
Copy Markdown
Owner

The nightly still passed the publish action's old input names; GitHub only warns on unknown inputs, so index-host defaulted to pypi.org and the nightly attempted a production upload (PyPI rejected it: no publisher for nightly.yml). Now the destination is the environment variable PYPI_INDEX_HOST (pypi env: pypi.org; testpypi env: test.pypi.org), index-host has no default, and pypi.org is refused unless the ref is a v* tag.

@github-actions github-actions Bot added the bug Something isn't working label Oct 8, 2026
@chad-loder chad-loder changed the title fix(ci): require an explicit publish index and allow production PyPI only from release tags fix(ci): bind the publish index to the deployment environment and allow production PyPI only from release tags Oct 8, 2026
@chad-loder
chad-loder merged commit bd6f3aa into main Oct 8, 2026
25 of 26 checks passed
@chad-loder
chad-loder deleted the fix/publish-index-guard branch October 8, 2026 23:35
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants