Skip to content

ci(release): publish e2b-charts to PyPI via trusted publishing - #359

Merged
mishushakov merged 1 commit into
mainfrom
devin/1793105599-charts-pypi-trusted-publishing
Oct 27, 2026
Merged

mishushakov merged 1 commit into
mainfrom
devin/1793105599-charts-pypi-trusted-publishing

Conversation

@devin-ai-integration

Copy link
Copy Markdown
Contributor

Summary

The release run after #358 (https://github.com/e2b-dev/code-interpreter/actions/runs/40506648705) failed in Charts release: uv publish of e2b_charts-1.1.0 got 403 Invalid or non-existent authentication information from PyPI, i.e. CHARTS_PYPI_TOKEN is no longer accepted. Because the template build pins the freshly published e2b_charts version, it is gated on that job and was skipped too, so the template rebuild from #358 never happened.

This switches the charts publish to OIDC trusted publishing, the same way the Python packages in e2b-dev/E2B are published:

       - name: Release new versions
         run: |
           uv build
-          uv publish --check-url https://pypi.org/simple/
+          uv publish --trusted-publishing always --check-url https://pypi.org/simple/
         working-directory: ./chart_data_extractor
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          UV_PUBLISH_TOKEN: ${{ secrets.CHARTS_PYPI_TOKEN }}

The workflow already grants id-token: write. PYPI_TOKEN is also dropped from the Release job: every workspace package here is private and none has a postPublish hook, so changeset publish only tags and nothing reads it.

Before merging

Add a trusted publisher on https://pypi.org/manage/project/e2b-charts/settings/publishing/ : owner e2b-dev, repository code-interpreter, workflow release.yml, environment left empty. After merging, re-dispatch Release to publish e2b-charts 1.1.0 and the template.

CHARTS_PYPI_TOKEN and PYPI_TOKEN can then be deleted from the repo secrets.

Link to Devin session: https://app.devin.ai/sessions/943dbceafe0f4e0a91bc044363751b97
Open in Devin Desktop: https://app.devin.ai/desktop/session/943dbceafe0f4e0a91bc044363751b97?variant=devin
Requested by: @mishushakov

@devin-ai-integration

Copy link
Copy Markdown
Contributor Author

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

  • Disable automatic comment, CI, and merge conflict monitoring

@cla-bot cla-bot Bot added the cla-signed label Oct 27, 2026
@mishushakov
mishushakov marked this pull request as ready for review October 27, 2026 12:56
@mishushakov
mishushakov self-requested a review as a code owner October 27, 2026 12:56
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-27T12:57:51.195362Z 847c5bd Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Devin Review

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code review found no issues

No high-confidence issues detected in this change.

@mishushakov
mishushakov merged commit ee72a63 into main Oct 27, 2026
13 checks passed
@mishushakov
mishushakov deleted the devin/1793105599-charts-pypi-trusted-publishing branch October 27, 2026 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant