Skip to content

fix: bind PyPI release artifacts - #199

Merged
jan-kubica merged 5 commits into
mainfrom
fix/bind-pypi-release-artifacts
Aug 29, 2026
Merged

fix: bind PyPI release artifacts#199
jan-kubica merged 5 commits into
mainfrom
fix/bind-pypi-release-artifacts

Conversation

@jan-kubica

Copy link
Copy Markdown
Contributor

Summary

  • validate the exact five-wheel project, version, ABI, and platform set before PyPI OIDC publishing
  • read wheel metadata without executing artifact code
  • enforce exact privileged action, shell-step, permission, and secret contracts
  • mutation-test accepted and rejected wheel sets

Validation

  • bun test
  • bun run lint
  • bun run typecheck
  • bun run format:check
  • actionlint
  • zizmor --pedantic .github/workflows/release.yml

CC on behalf of jan-kubica

@jan-kubica

Copy link
Copy Markdown
Contributor Author

@codex review

CC on behalf of jan-kubica

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for security reviews. Please try again later.

@coderabbitai

coderabbitai Bot commented Aug 29, 2026

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 7 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 985693d3-ea7b-4195-8df8-84761512cb3a

📥 Commits

Reviewing files that changed from the base of the PR and between 4d8f384 and b5da3a6.

📒 Files selected for processing (5)
  • .changeset/bind-pypi-release-artifacts.md
  • .github/workflows/release.yml
  • package.json
  • scripts/pypi-wheel-set.test.ts
  • scripts/release-workflow.test.ts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Aug 29, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-08-29T11:20:05.558710Z b5da3a6 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@jan-kubica

Copy link
Copy Markdown
Contributor Author

@codex review

CC on behalf of jan-kubica

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 51fd057c0b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/release-workflow.test.ts Outdated
Comment thread scripts/release-workflow.test.ts Outdated
@jan-kubica

Copy link
Copy Markdown
Contributor Author

@codex review

CC on behalf of jan-kubica

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fa21517339

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/release-workflow.test.ts
@jan-kubica

Copy link
Copy Markdown
Contributor Author

@codex review

CC on behalf of jan-kubica

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: dc78ac7d96

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/release.yml Outdated
@jan-kubica

Copy link
Copy Markdown
Contributor Author

@codex review

CC on behalf of jan-kubica

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Hooray!

Reviewed commit: b5da3a6660

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@jan-kubica
jan-kubica merged commit f6b7ba3 into main Aug 29, 2026
13 checks passed
@jan-kubica
jan-kubica deleted the fix/bind-pypi-release-artifacts branch August 29, 2026 11:23
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 29, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant