Skip to content

fix: disable PyPI publishing in semantic-release until OIDC configured#94

Merged
fgogolli merged 1 commit intomainfrom
fix/semantic-release-github-only
Jan 5, 2026
Merged

fix: disable PyPI publishing in semantic-release until OIDC configured#94
fgogolli merged 1 commit intomainfrom
fix/semantic-release-github-only

Conversation

@fgogolli
Copy link
Copy Markdown
Contributor

@fgogolli fgogolli commented Jan 5, 2026

Description

Semantic-release is failing with 401 errors because it attempts to publish to PyPI without OIDC permissions configured. This change disables PyPI publishing temporarily while keeping GitHub release functionality intact.

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Performance improvement
  • Code cleanup or refactor
  • Dependencies update
  • CI/CD or build process changes

Related Issues

Fixes semantic-release 401 unauthorized errors during release process

How Has This Been Tested?

  • Unit tests added/updated
  • Integration tests added/updated
  • Manual testing performed

Manual testing shows semantic-release fails when attempting PyPI upload due to missing OIDC configuration.

Test Configuration

  • Python version: 3.11
  • OS: GitHub Actions Ubuntu
  • AWS region: N/A
  • Dependencies changed: None

Checklist

  • My code follows the project's style guidelines
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published
  • I have updated the CHANGELOG.md file
  • I have updated the version number (if applicable)

Additional Notes

This is a temporary fix to enable end-to-end GitHub release testing. After this change works consistently, PyPI OIDC permissions should be configured and publishing re-enabled.

Performance Impact

  • No significant performance impact
  • Performance improved
  • Performance degraded (explain why it's necessary)

Security Considerations

  • No security implications
  • Security improved
  • Potential security concerns (explain and justify)

Dependencies

No dependency changes

Deployment Notes

After merge, semantic-release should successfully create GitHub releases with build artifacts attached. PyPI publishing will be skipped until OIDC is configured.

- Set dist = false to focus on GitHub releases first
- Keep upload_to_vcs_release = true for GitHub release creation
- Keep dist_glob_patterns for attaching build artifacts
- This allows end-to-end flow: tag → build → GitHub release → artifacts
- PyPI publishing can be re-enabled after OIDC setup
@fgogolli fgogolli merged commit 9c8d456 into main Jan 5, 2026
45 checks passed
@fgogolli fgogolli deleted the fix/semantic-release-github-only branch January 5, 2026 21:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant