Skip to content

Conversation

@MSWechsler
Copy link
Contributor

edgetest version x.y.z

Description

This PR transitions the package publish workflow from Twine to trusted publisher. In addition, it pins action commit SHAs instead of tags, providing security improvements.

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • New and existing integration tests pass locally with my changes
  • Any dependent changes have been merged and published in downstream modules

@CLAassistant
Copy link

CLAassistant commented Oct 21, 2025

CLA assistant check
All committers have signed the CLA.

@MSWechsler MSWechsler changed the title chore: migrate to trusted publisher and pin commits for publish workflow enhancement: migrate to trusted publisher and pin commits for publish workflow Oct 21, 2025
@MSWechsler
Copy link
Contributor Author

Screenshot 2025-10-21 at 9 37 10 PM

@jeklein jeklein merged commit 87f613c into capitalone:dev Dec 9, 2025
7 checks passed
@fdosani fdosani mentioned this pull request Dec 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants