From bd934d157f51b126d9a69b266773d804e3fd4308 Mon Sep 17 00:00:00 2001 From: "Qiaoyu (Joey) Deng" Date: Fri, 23 Oct 2026 17:38:43 -0700 Subject: [PATCH] ci(release): use pypa/gh-action-pypi-publish@release/v1 - Reference the publish action by its `release/v1` branch in `release.yml` and `nightly.yml`, as the PyPA README and MLX do, so publishing picks up v1.x fixes without a version bump --- .github/workflows/nightly.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index dc470e4..1eaee1a 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -104,4 +104,4 @@ jobs: - name: Publish to PyPI # Uploads via Trusted Publishing and signs a PEP 740 attestation for each # file with this workflow's OIDC identity, so PyPI shows its provenance. - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 + uses: pypa/gh-action-pypi-publish@release/v1 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d1af138..671311d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -148,4 +148,4 @@ jobs: - name: Publish to PyPI # Uploads via Trusted Publishing and signs a PEP 740 attestation for each # file with this workflow's OIDC identity, so PyPI shows its provenance. - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 + uses: pypa/gh-action-pypi-publish@release/v1