From af01f06c1bc04a7da1b813f9a01c981cedb4fcd7 Mon Sep 17 00:00:00 2001 From: Maximilian Linhoff Date: Wed, 10 Dec 2025 14:14:07 +0100 Subject: [PATCH 1/2] Use trusted publishing for deploying to pypi --- .github/workflows/deploy.yml | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index b49bca5f..85a83c90 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -8,14 +8,18 @@ on: jobs: deploy: runs-on: ubuntu-latest + environment: pypi + permissions: + id-token: write + steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: "3.12" @@ -29,6 +33,3 @@ jobs: - name: Publish package uses: pypa/gh-action-pypi-publish@release/v1 - with: - user: __token__ - password: ${{ secrets.pypi_password }} From 169cfbae0af08e32ce8c4fe8aaa45bad604b7e6c Mon Sep 17 00:00:00 2001 From: Maximilian Linhoff Date: Mon, 1 Jun 2026 17:00:15 +0200 Subject: [PATCH 2/2] Remove obsolete codeowners --- CODEOWNERS | 43 ------------------------------------------- 1 file changed, 43 deletions(-) delete mode 100644 CODEOWNERS diff --git a/CODEOWNERS b/CODEOWNERS deleted file mode 100644 index 2f875188..00000000 --- a/CODEOWNERS +++ /dev/null @@ -1,43 +0,0 @@ -# EXAMPLE FROM GITHUB DOCS TO FILL OUT BY AUTHORS & CONTRIBUTORS - -# This is a comment. -# Each line is a file pattern followed by one or more owners. - -# These owners will be the default owners for everything in -# the repo. Unless a later match takes precedence, -# @global-owner1 and @global-owner2 will be requested for -# review when someone opens a pull request. -# * @global-owner1 @global-owner2 -* @maxnoe @HealthyPear - -pyirf/interpolation/* @RuneDominik - -# Order is important; the last matching pattern takes the most -# precedence. When someone opens a pull request that only -# modifies JS files, only @js-owner and not the global -# owner(s) will be requested for a review. -# *.js @js-owner - -# You can also use email addresses if you prefer. They'll be -# used to look up users just like we do for commit author -# emails. -# *.go docs@example.com - -# In this example, @doctocat owns any files in the build/logs -# directory at the root of the repository and any of its -# subdirectories. -# /build/logs/ @doctocat - -# The `docs/*` pattern will match files like -# `docs/getting-started.md` but not further nested files like -# `docs/build-app/troubleshooting.md`. -# docs/* docs@example.com - -# In this example, @octocat owns any file in an apps directory -# anywhere in your repository. -# apps/ @octocat - -# In this example, @doctocat owns any file in the `/docs` -# directory in the root of your repository and any of its -# subdirectories. -# /docs/ @doctocat