Skip to content

v0.2.0: PyPI Package with Trusted Publishing

Choose a tag to compare

View all tags
@Anstrays Anstrays released this 28 Jun 10:35
v0.2.0
ef3f9ee
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

arc-builder-kit v0.2.0

Package

  • Installable Python package: pip install arc-builder-kit
  • CLI: arc-builder (doctor, validate, templates, scaffold, facts, manifest, mcp, release-packet)
  • MCP server: arc-builder-mcp-server
  • Wheel includes templates/, config/, examples/ - no git symlinks

PyPI Trusted Publishing

  • OIDC-based publishing via GitHub Actions (publish-pypi.yml)
  • No API token required - uses pending Trusted Publisher on PyPI
  • Protected pypi environment

Security

  • Fixed arbitrary directory deletion via release-packet --force
  • Secret scanning in validation pipeline
  • python_requires>=3.10 honestly declared

Verification

  • python scripts/test_all.py -> 41/41 passed
  • twine check dist/* -> PASSED
  • Python 3.10 installed-wheel smoke -> PASSED
  • Python 3.12 live RPC -> 5042002 / 0x4cef52, PASSED

Artifacts

  • Wheel SHA-256: 6281ce6b5b9ffdac64a0fe51a539bd32b34c3b85a0315be468fcf37d7ef874e7
  • sdist SHA-256: 5e1ea1e97d4f7711ed7603f4873bdd7f8bad5cd99af77219e0c1c0a8e81b4a72
Assets 4
Loading