kevinjqliu opened a new issue, #2361: URL: https://github.com/apache/iceberg-rust/issues/2361
We made python publishing a "reusable workflow" and [part of publish.yml](https://github.com/apache/iceberg-rust/blob/4b0b35255469039d9877218049f93b07556124b5/.github/workflows/publish.yml#L72-L82) Apparently this isnt a supported path for PyPi trusted publishing... ``` ##[debug]Authenticating to https://upload.pypi.org/legacy/ via Trusted Publishing ##[debug]Selected Trusted Publishing Exchange Endpoint: https://upload.pypi.org/_/Oidc/Mint-Token Warning: Potential workflow misconfiguration: The claims in this token suggest that the calling workflow is a reusable workflow. In particular, this action was initiated by: apache/iceberg-rust/.github/workflows/release_python.yml@refs/tags/v0.9.1-rc.2 Whereas its parent workflow is: apache/iceberg-rust/.github/workflows/publish.yml@refs/tags/v0.9.1-rc.2 Reusable workflows are **not currently supported** by PyPI's Trusted Publishing functionality, and are subject to breakage. Users are **strongly encouraged** to avoid using reusable workflows for Trusted Publishing until support becomes official. Please, do not report bugs if this breaks. ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
