Skip to content

Migrate PyPI publish to Trusted Publishing (OIDC)#6

Draft
Copilot wants to merge 2 commits intomainfrom
copilot/fix-pypi-authentication-issue
Draft

Migrate PyPI publish to Trusted Publishing (OIDC)#6
Copilot wants to merge 2 commits intomainfrom
copilot/fix-pypi-authentication-issue

Conversation

Copy link
Contributor

Copilot AI commented Mar 7, 2026

PyPI publish fails with 403 Forbidden — Invalid or non-existent authentication information despite PYPI_TOKEN being set.

Switches from token-based auth to Trusted Publishing (OIDC), which was already planned per inline comments:

  • Add permissions: id-token: write to the publish job
  • Remove password: ${{ secrets.PYPI_TOKEN }} — the action auto-negotiates an OIDC token instead

Manual step required after merge: register the Trusted Publisher on PyPI at
https://pypi.org/manage/project/neleus/settings/publishing/ → Add GitHub provider with workflow_filename: build-wheels.yml.


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

… auth error

Co-authored-by: auralshin <41705919+auralshin@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix authentication issue for PyPI publishing Migrate PyPI publish to Trusted Publishing (OIDC) Mar 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants