T099, publish openDox to PyPI by trusted publishing (10.3's install line) (plan 034) - #78

Merged

brettheap merged 22 commits into

mainfrom

build/034-p3w-t099-pypi-release

Oct 5, 2026

Commits on Oct 2, 2026

T099: a release workflow that publishes openDox to PyPI by trusted publishing (plan 034)

brettheap
and
claude
committed
4173dbc

Commits on Oct 3, 2026

Fix round 1: the full requirement sets, no epoch, the installed closure, the release tag, the install line as written, and tests (Copilot review)

brettheap
and
claude
committed
647d246
Merge main (66ff7257) into T099's release workflow
brettheap
committed
2b0083b
Fix round 2: TestPyPI's JSON read retries until it matches, the token wording is exact, and README's links resolve on PyPI (Copilot review)

brettheap
and
claude
committed
c324c61
Merge main (2fc714d2) into T099's release workflow
brettheap
committed
de3e324
Fix round 3: read the root's pin anonymously over git, and refuse pre-releases (Copilot review)

brettheap
and
claude
committed
7cc65f9
Fix round 4: skip-existing on both uploads, PyPI's served digests checked after the upload, and job timeouts that fit the retries (Copilot review)

brettheap
and
claude
committed
74b8737
Fix round 5: the root's pin is checked again right before each upload (Copilot review)

brettheap
and
claude
committed
994a39d
Merge main (1130e996: #63 T080, #74 T081) into T101's release workflow

brettheap
and
claude
committed
5cdb2de
Fix round 6: markers compared whole, and a preflight before each upload (Copilot review)

brettheap
and
claude
committed
d7e9ff7
Merge main (8e377823: #69 T072, #73 T075, #64) into T101's release workflow

brettheap
and
claude
committed
7cb07d6
Fix round 6: a changed direct URL is refused too (a case the URL comparison needs)

brettheap
and
claude
committed
d91fd5b
Fix round 7: every step after the build declares its timeout, and the test reads each bound (Copilot review)

brettheap
and
claude
committed
960d549
Fix round 8: the dry run proves it installed the verified TestPyPI wheel before running it (Copilot review)

brettheap
and
claude
committed
b75205d
The dry run's credential note names the checkout's token (Copilot review)

brettheap
and
claude
committed
f59e710
Fix round 9: each publish job re-checks its approval at use time (Copilot review)

brettheap
and
claude
committed
b390785

Commits on Oct 4, 2026

Merge main (c4b55cc4: #72, #77, #80, #81, #85) into T101's release workflow

brettheap
and
claude
committed
d5dc825
Merge main (ca9e1bd5: #76 T082) into T101's release workflow

brettheap
and
claude
committed
7ee2b42

Commits on Oct 5, 2026

Merge main (651c35fe: #82 T100, #84 T104, #86 T100 follow-on) into T101's release workflow

brettheap
and
claude
committed
e5f7f55
Round 10: record the digests before the smoke test, and refuse a yanked file

brettheap
and
claude
committed
7fc0c46
Round 11: refs/heads/main, the environments' deployment limit, and the stated limits

brettheap
and
claude
committed
93d1321
Round 12, text only: the workflow checks a custom deployment limit, not its pattern

brettheap
and
claude
committed
07cc8f3