twine: --trusted-publishing never + env-var diagnostic, v0.1.5

Pipeline #40358 (v0.1.4) failed with the same OIDC error as 0.1.0:

  TrustedPublishingFailure: Unable to retrieve an OIDC token from
  the CI platform for trusted publishing GitLab: Environment
  variable PYPI_ID_TOKEN not found

Twine 6's default is --trusted-publishing automatic, which ALWAYS
tries OIDC first when it detects GitLab CI env vars, regardless of
whether TWINE_USERNAME/TWINE_PASSWORD are set. Adding
'--trusted-publishing never' forces classic API token auth via env
vars (or .pypirc) and skips the OIDC dance entirely.

Plus a sanity-check that the group-scoped TWINE_USERNAME and
TWINE_PASSWORD vars actually landed in the env on this pipeline
('set' or 'MISSING' — never echoes the value). If they're MISSING
despite being configured at the python/ group level, the most likely
cause is the vars being marked Protected while the tag isn't a
protected ref (Settings -> Repository -> Protected tags).
This commit is contained in:
russell@unturf.com 2026-06-16 15:06:56 -04:00
parent dee08976ef
commit f595015582
No known key found for this signature in database
3 changed files with 11 additions and 3 deletions

View file

@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
[project]
name = "erldistpy"
version = "0.1.4"
version = "0.1.5"
description = "Native Python client for Erlang distribution protocol — EPMD + v6 handshake + gen_server call(), no asyncio."
readme = { file = "README.md", content-type = "text/markdown" }
requires-python = ">=3.10"