Trusted publishing exchange failure: Token request failed: the server refused the request for the following reasons: * `invalid-publisher`: valid token, but no corresponding publisher (Publisher with matching claims was not found) This generally indicates a trusted publisher configuration error, but could also indicate an internal error on GitHub or PyPI's part. The claims rendered below are **for debugging purposes only**. You should **not** use them to configure a trusted publisher unless they already match your expectations. If a claim is not present in the claim set, then it is rendered as `MISSING`. * `sub`: `repo:edmundmiller/altair-upset:environment:testpypi` * `repository`: `edmundmiller/altair-upset` * `repository_owner`: `edmundmiller` * `repository_owner_id`: `20095261` * `workflow_ref`: `edmundmiller/altair-upset/.github/workflows/publish.yml@refs/heads/renovate/actions-checkout-7.x` * `job_workflow_ref`: `edmundmiller/altair-upset/.github/workflows/publish.yml@refs/heads/renovate/actions-checkout-7.x` * `ref`: `refs/heads/renovate/actions-checkout-7.x` * `environment`: `testpypi` See https://docs.pypi.org/trusted-publishers/troubleshooting/ for more help.

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/