v1.0.1
v1.0.1 (2024-11-10)
Bug Fixes
- fix: improve release process and documentation (#34)
Description
This PR improves the release process and documentation by:
- Makes tag pushing explicit in the release workflow
- Fixes version management in semantic release
- Updates README with PyPI installation instructions
Changes
- Added explicit tag pushing parameters to semantic-release workflow
- Updated version management in pyproject.toml:
- Added version_toml configuration
- Changed from dynamic to static versioning
- Set version to match current release (1.0.1)
- Updated README.md:
- Added PyPI installation instructions
- Fixed image URL for PyPI compatibility
- Reorganized installation and usage sections (
f42d5d1
)
- fix: use PyPI trusted publisher authentication (#33)
Updates the GitHub Actions publish workflow to use PyPI's Trusted
Publisher authentication instead of token-based authentication. This
change improves security by:
- Removing the need to store PyPI tokens in GitHub secrets
- Using OpenID Connect (OIDC) for secure authentication
- Leveraging PyPI's recommended authentication method for GitHub Actions
Changes
- Removed token-based authentication (TWINE_USERNAME and TWINE_PASSWORD)
- Added required
id-token: write
permission for OIDC - Switched from manual twine upload to
pypa/gh-action-pypi-publish
action (3a0d9b8
)