[brightsparc]

Publishes introspection-aauth (packages/introspection-aauth) to PyPI. publish.yml runs only on v* tags and builds only introspection-sdk, so release-please's introspection-aauth-v* tags publish nothing today.

The workflow

• publish-aauth.yml runs on introspection-aauth-v* tags, or by hand with a tag name, which publishes a tag that already exists, such as introspection-aauth-v1.0.0.
• It checks out the tag and refuses one that does not name pyproject.toml's version. It then runs the package's tests, builds it, and publishes with PyPI trusted publishing (OIDC): the publish environment, id-token: write, no token.
• A separate file, so PyPI's trusted publisher for introspection-aauth names this workflow alone, and introspection-sdk's stays as it is.

Setup on PyPI

Add a pending trusted publisher for the project introspection-aauth: owner introspection-org, repository introspection-python-sdk, workflow publish-aauth.yml, environment publish. A pending publisher creates the project on its first upload.

🤖 Generated with Claude Code