Merge branch 'dev' into sec_pypi_publishing

2025-11-07 09:59:42 +00:00 · 2025-10-27 06:41:51 +01:00 · 2025-10-19 10:56:12 +02:00 · 2025-10-06 20:28:38 +02:00 · 2025-10-04 17:25:20 +02:00 · 2025-09-24 07:04:06 +02:00
2 changed files with 11 additions and 6 deletions
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,8 +19,11 @@ jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
+    environment: pypi
    permissions:
      contents: write # Required to upload release assets
+      id-token: write # For "Trusted Publisher" to PyPi
+    if: github.repository_owner == 'home-assistant'
    steps:
      - name: Checkout the repository
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
@@ -46,14 +49,18 @@ jobs:
        run: ./script/translations_download
        env:
          LOKALISE_TOKEN: ${{ secrets.LOKALISE_TOKEN }}
+
      - name: Build and release package
        run: |
-          python3 -m pip install twine build
-          export TWINE_USERNAME="__token__"
-          export TWINE_PASSWORD="${{ secrets.TWINE_TOKEN }}"
+          python3 -m pip install build
          export SKIP_FETCH_NIGHTLY_TRANSLATIONS=1
          script/release

+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
+        with:
+          skip-existing: true
+
      - name: Upload release assets
        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
        with:
--- a/script/release
+++ b/script/release
@@ -1,5 +1,4 @@
 #!/bin/sh
-# Pushes a new version to PyPi.

 # Stop on errors
 set -e
@@ -12,5 +11,4 @@ yarn install
 script/build_frontend

 rm -rf dist home_assistant_frontend.egg-info
-python3 -m build
-python3 -m twine upload dist/*.whl --skip-existing
+python3 -m build -q
Author	SHA1	Message	Date
Simon Lamon	b8110d1a45	Merge branch 'dev' into sec_pypi_publishing	2025-10-27 06:41:51 +01:00
Simon Lamon	19e9de39c5	Merge branch 'dev' into sec_pypi_publishing	2025-10-19 10:56:12 +02:00
Simon Lamon	f22f01e513	Merge branch 'dev' into sec_pypi_publishing	2025-10-06 20:28:38 +02:00
Simon Lamon	3f86f144b5	Merge branch 'dev' into sec_pypi_publishing	2025-10-04 17:25:20 +02:00
Simon Lamon	4efef5ed16	Update release.yaml	2025-09-24 07:04:06 +02:00
Simon Lamon	cac7ae2a40	Remove twine and introduce trusted publishing	2025-09-20 21:23:04 +02:00