From 8ebc16108c60f59e932c48876e94b5f840d79b72 Mon Sep 17 00:00:00 2001 From: Oleksandr Omyshev Date: Fri, 7 Aug 2026 11:01:12 +0300 Subject: [PATCH] ci: Run the release job in the release environment The PyPI trusted publisher for this project is configured with environment "release". OIDC claims must match exactly, so the release job has to declare it or uv publish is rejected. --- .github/workflows/cd.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index a9f4418..8500a42 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -14,6 +14,7 @@ jobs: release: runs-on: ubuntu-latest if: startsWith(github.ref, 'refs/tags/') + environment: release permissions: contents: read id-token: write