v4.2.3 — Docs Cleanup & PyPI Publish Path
v4.2.3 — Docs Cleanup & PyPI Publish Path
Patch release on top of the immutable v4.2.2. No breaking public API change.
Added
- PyPI Trusted Publishing workflow (
.github/workflows/publish.yml) — triggered on version tags: runs the full gate (mypy/ruff/pytest) on the tagged commit, then publishes the wheel + sdist via OIDC (no long-lived token; actions pinned by SHA) and attaches artifacts to the release. SECURITY.mdPublishing section — documents the publish path; no PyPI credentials exist in the repository.
Changed
- Stripped all remaining internal-era markers (
§NN,W# §,Phase N) from the user docs, SECURITY, CONTRIBUTING, and the MCP ADR.
Fixed
publish.ymlcheckout pinned to the correctactions/checkout@v5SHA.
Gates (live)
pytest 257 · mypy 104 clean · ruff pass · mkdocs --strict pass · check_public_claims 0 issues · CI green (main + tag runs).
Honest flags
PyPI publish requires the owner to enable OIDC Trusted Publishing on the PyPI project + create a pypi GitHub environment (PENDING OWNER ACTION). Tags v4.2.0–v4.2.2 unchanged.