mirror of
https://github.com/tiennm99/DocsGPT.git
synced 2026-10-12 14:14:50 +00:00
- backend-release checks the tag and the release separately and publishes only when it created the release in this run. A run that pushed the tag and then failed to create the release used to skip both on re-run. - pypi-publish accepts a `target` from callers (default pypi) so the reusable-workflow path can be rehearsed against TestPyPI; the TestPyPI job skips files that already exist there. - A temporary workflow, to be removed before merge, calls pypi-publish the way backend-release does, aimed at TestPyPI, on this pull request: PyPI verifies the job_workflow_ref claim, which names the called file, so the run proves the trusted-publishing path through workflow_call. - zizmor-action v0.6.3: the pinned v0.5.2 bundles zizmor 1.23, which cannot parse the `uses: $/...` self-repository syntax and aborted the audit.