provide-testkit 2026-03-30
Standardize release pipeline with TestPyPI staging, Sigstore signing, and SBOM
3 files · 137+ · 49-

Release pipeline overhaul

streamline architectural
1 file changed
  • release.yml New 119-line release workflow with build (uv build, twine check, cyclonedx SBOM), publish-testpypi (OIDC trusted publishing, skip-existing), verify-testpypi (install and import test), publish-pypi (release-event gated), and sign-and-upload (Sigstore v3.0.0 signing, gh release upload with --repo flag)
  • Built a comprehensive release pipeline with TestPyPI staging, installation verification, approval-gated PyPI publishing via OIDC trusted publishing, Sigstore signing, and CycloneDX SBOM generation streamline architectural
    1 file
    • release.yml
  • Pinned all GitHub Actions to specific commit SHAs (checkout, setup-uv v8.0.0, upload/download-artifact, pypi-publish, sigstore) for supply chain security harden external
    1 file
    • release.yml

Version bump and docs

baseline external
2 files changed
  • VERSION Bumped from 0.3.28 to 0.3.29
  • README.md Converted all relative example links to absolute GitHub URLs for correct rendering outside the repo
  • Bumped version to 0.3.29 and converted example README links to absolute GitHub URLs baseline external
    2 files
    • VERSION
    • README.md
← 2026-03-28 provide-testkit changelog → 2026-04-01 provide-testkit →