v0.1.1

Key Features

1. Trigger Mechanism

   • Automatically runs when:

     • New GitHub Release is published

     • Manual trigger via GitHub UI (workflow_dispatch)

   • Environment: Dedicated pypi environment for security isolation

2. Security Implementation

   • Uses OpenID Connect (OIDC) for PyPI authentication

   • No stored credentials (eliminates secret rotation needs)

   • Requires id-token: write permission for JWT token generation

3. Build Process

   • Clean Python environment setup

   • Builds both wheel and sdist packages

   • Verifies package structure compliance with PEP 517/518

4. Publishing Controls

   • Strict PyPI environment protection

   • Version validation against existing PyPI releases

   • Automatic metadata verification

---

Workflow Breakdown

1. Trigger Conditions

yaml