Skip to content

ci: fix deploy workflow to only trigger on version tags#66

Merged
lan496 merged 1 commit intodevelopfrom
fix/deploy-workflow-trigger
Apr 5, 2026
Merged

ci: fix deploy workflow to only trigger on version tags#66
lan496 merged 1 commit intodevelopfrom
fix/deploy-workflow-trigger

Conversation

@lan496
Copy link
Copy Markdown
Owner

@lan496 lan496 commented Apr 5, 2026

Summary

  • Remove branches: [develop] trigger that caused deploy to run on every push, failing because non-release commits cannot publish to PyPI (fixes run #23893133166)
  • Switch from API token auth to PyPI Trusted Publishers (OIDC) for tokenless publishing

Setup required

After merging, configure Trusted Publishers on PyPI:

  1. Go to https://pypi.org/manage/project/hsnf/settings/publishing/
  2. Add GitHub Actions publisher: owner=lan496, repo=hsnf, workflow=deploy.yml, environment=pypi
  3. Create a pypi environment in GitHub repo settings (Settings > Environments)

Test plan

  • Verify no deploy job triggers on push to develop
  • Next tag push (v*.*.*) triggers the deploy workflow
  • Trusted Publishers OIDC auth works with PyPI

[Claude Code] Generated with Claude Code

Remove `branches: [develop]` trigger that caused deploy to run on every
push to develop, failing because non-release commits cannot publish to
PyPI. Switch from API token auth to Trusted Publishers (OIDC) for more
secure, tokenless publishing.

Co-Authored-By: Claude <noreply@anthropic.com>
@lan496 lan496 marked this pull request as ready for review April 5, 2026 00:21
@lan496 lan496 merged commit 782d6ad into develop Apr 5, 2026
3 of 4 checks passed
@lan496 lan496 deleted the fix/deploy-workflow-trigger branch April 5, 2026 00:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant