Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: tmux-python/libtmux
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 4df1128
Choose a base ref
...
head repository: tmux-python/libtmux
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 3826ef9
Choose a head ref
  • 4 commits
  • 5 files changed
  • 1 contributor

Commits on Dec 7, 2025

  1. ci(release): Migrate to PyPI Trusted Publisher 

    why: Improve security by eliminating stored API tokens and enable package attestations
what:
- Add OIDC permissions (id-token, attestations) to release job
- Remove user/password authentication in favor of trusted publishing
- Enable attestations for supply chain security
- Fix deprecated skip_existing to skip-existing
    @tony
    tony committed Dec 7, 2025
    Configuration menu
    Copy the full SHA
    4c8fee2 View commit details
    Browse the repository at this point in the history

  2. docs(CHANGES): Document Trusted Publisher migration (#615)

    @tony
    tony committed Dec 7, 2025
    Configuration menu
    Copy the full SHA
    e7ab9c5 View commit details
    Browse the repository at this point in the history

  3. ci(release): Migrate to PyPI Trusted Publisher (#615) 

    ## Summary
- Migrate PyPI publishing from API token to OIDC-based Trusted Publisher
- Enable package attestations for supply chain security
- Fix deprecated `skip_existing` parameter

## Changes
- Add `permissions` block with `id-token: write` and `attestations: write`
- Remove `user` and `password` parameters from publish step
- Add `attestations: true` to enable cryptographic attestations
- Change `skip_existing` to `skip-existing` (kebab-case)
    @tony
    tony authored Dec 7, 2025
    Configuration menu
    Copy the full SHA
    33af048 View commit details
    Browse the repository at this point in the history

  4. Tag v0.52.1 (PyPI Trusted Publisher)

    @tony
    tony committed Dec 7, 2025
    Configuration menu
    Copy the full SHA
    3826ef9 View commit details
    Browse the repository at this point in the history
Loading