Skip to content

v4.2.3 — Docs Cleanup & PyPI Publish Path

Choose a tag to compare

@Jackxiaozhiren Jackxiaozhiren released this 26 Aug 09:47
· 185 commits to main since this release

v4.2.3 — Docs Cleanup & PyPI Publish Path

Patch release on top of the immutable v4.2.2. No breaking public API change.

Added

  • PyPI Trusted Publishing workflow (.github/workflows/publish.yml) — triggered on version tags: runs the full gate (mypy/ruff/pytest) on the tagged commit, then publishes the wheel + sdist via OIDC (no long-lived token; actions pinned by SHA) and attaches artifacts to the release.
  • SECURITY.md Publishing section — documents the publish path; no PyPI credentials exist in the repository.

Changed

  • Stripped all remaining internal-era markers (§NN, W# §, Phase N) from the user docs, SECURITY, CONTRIBUTING, and the MCP ADR.

Fixed

  • publish.yml checkout pinned to the correct actions/checkout@v5 SHA.

Gates (live)

pytest 257 · mypy 104 clean · ruff pass · mkdocs --strict pass · check_public_claims 0 issues · CI green (main + tag runs).

Honest flags

PyPI publish requires the owner to enable OIDC Trusted Publishing on the PyPI project + create a pypi GitHub environment (PENDING OWNER ACTION). Tags v4.2.0–v4.2.2 unchanged.