EverOS/.github
zhanghui bebb448c89
ci(release): add PyPI Trusted Publishing workflow + /release skill (#358)
GitHub had no publish path — the package was previously released from the
(now-archived) GitLab mirror. Bring publishing to the public repo:

- .github/workflows/release.yml: on a vX.Y.Z tag, build + smoke-test
  (make package) and upload to PyPI via Trusted Publishing (OIDC, no stored
  token), gated behind the `release` environment for manual approval. A guard
  step refuses to publish when the tag != pyproject version.
- .claude/skills/release: /release documents the cut (bump version →
  CHANGELOG → tag → approve → verify) and the one-time PyPI trusted-publisher
  + GitHub environment setup.

Requires two owner-only one-time steps before the first release (documented
in the workflow header and the skill): register the GitHub trusted publisher
on PyPI, and create the `release` environment with required reviewers.

Co-authored-by: zhanghui <zhanghui@shanda.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-28 21:17:17 +08:00
..
ISSUE_TEMPLATE chore: finalize repo audit hygiene (#257) 2026-06-06 13:59:12 +08:00
workflows ci(release): add PyPI Trusted Publishing workflow + /release skill (#358) 2026-07-28 21:17:17 +08:00
BRANCH_PROTECTION.md docs: document EverOS 1.0.0 issue migration (#258) 2026-06-06 14:33:00 +08:00
PULL_REQUEST_TEMPLATE.md ci: harden contributor checks (#254) 2026-06-06 10:47:16 +08:00
dependabot.yml chore: initialize EverOS 1.0.0 2026-06-06 07:33:17 +08:00