From 0f0117408f26b4bb645bf93cff63dd0af483d5ee Mon Sep 17 00:00:00 2001 From: Henry Wright Date: Fri, 31 Jul 2026 12:06:27 +0100 Subject: [PATCH 1/5] update manylinux version --- .github/workflows/ci-wheels.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml index 989f0cd7..154ef986 100644 --- a/.github/workflows/ci-wheels.yml +++ b/.github/workflows/ci-wheels.yml @@ -103,7 +103,7 @@ jobs: CIBW_ARCHS: ${{ matrix.arch }} CIBW_BUILD: "cp311-* cp314-*" CIBW_BUILD_FRONTEND: build - CIBW_MANYLINUX_X86_64_IMAGE: manylinux2014 + CIBW_MANYLINUX_X86_64_IMAGE: manylinux_2_28 CIBW_BEFORE_BUILD_LINUX: yum install -y udunits2-devel CIBW_BEFORE_BUILD_MACOS: brew install udunits CIBW_BEFORE_BUILD_WINDOWS: python -m pip install delvewheel From 3193cc90ee32a9e0a7e0c12f631800838568ae49 Mon Sep 17 00:00:00 2001 From: Henry Wright Date: Fri, 31 Jul 2026 12:07:30 +0100 Subject: [PATCH 2/5] update MACOSX_DEPLOYMENT_TARGET --- .github/workflows/ci-wheels.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml index 154ef986..e62b48e1 100644 --- a/.github/workflows/ci-wheels.yml +++ b/.github/workflows/ci-wheels.yml @@ -78,7 +78,7 @@ jobs: - name: "Set MACOSX_DEPLOYMENT_TARGET" if: startsWith(matrix.os, 'macos') # Allows version targets to be set per architecture. - run: echo "MACOSX_DEPLOYMENT_TARGET=$([[ ${{ matrix.os }} == 'macos-latest' ]] && echo '15.0' || echo '15.0')" >> $GITHUB_ENV + run: echo "MACOSX_DEPLOYMENT_TARGET=$([[ ${{ matrix.os }} == 'macos-latest' ]] && echo '26.0' || echo '26.0')" >> $GITHUB_ENV - name: "Conda install" From 18215d480afd1d556dc8de13f3c4b305b2bbc4b9 Mon Sep 17 00:00:00 2001 From: Henry Wright Date: Fri, 31 Jul 2026 12:13:04 +0100 Subject: [PATCH 3/5] add trusted publishing --- .github/workflows/ci-wheels.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml index e62b48e1..5c3f4f5d 100644 --- a/.github/workflows/ci-wheels.yml +++ b/.github/workflows/ci-wheels.yml @@ -166,6 +166,9 @@ jobs: needs: [build_bdist, build_sdist] name: "Publish to Test PyPI" runs-on: ubuntu-latest + permissions: + id-token: write # Mandatory for PyPI Trusted Publishing OpenID Connect (OIDC) + environment: test-pypi # upload to Test PyPI for every commit on main branch if: github.event_name == 'push' && github.event.ref == 'refs/heads/main' steps: @@ -176,8 +179,6 @@ jobs: - uses: pypa/gh-action-pypi-publish@release/v1 with: - user: __token__ - password: ${{ secrets.TEST_PYPI_API_TOKEN }} repository_url: https://test.pypi.org/legacy/ skip_existing: true print_hash: true @@ -187,6 +188,9 @@ jobs: needs: [build_bdist, build_sdist] name: "Publish to PyPI" runs-on: ubuntu-latest + permissions: + id-token: write # Mandatory for PyPI Trusted Publishing OpenID Connect (OIDC) + environment: pypi # upload to PyPI for every tag starting with 'v' if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v') steps: From 84a6fd4d44482ebe015e22437bb03f8aabf55f42 Mon Sep 17 00:00:00 2001 From: Henry Wright Date: Fri, 31 Jul 2026 15:20:17 +0100 Subject: [PATCH 4/5] get MACOSX_DEPLOYMENT_TARGET for macos-15 --- .github/workflows/ci-wheels.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml index 5c3f4f5d..8f3de26c 100644 --- a/.github/workflows/ci-wheels.yml +++ b/.github/workflows/ci-wheels.yml @@ -78,7 +78,7 @@ jobs: - name: "Set MACOSX_DEPLOYMENT_TARGET" if: startsWith(matrix.os, 'macos') # Allows version targets to be set per architecture. - run: echo "MACOSX_DEPLOYMENT_TARGET=$([[ ${{ matrix.os }} == 'macos-latest' ]] && echo '26.0' || echo '26.0')" >> $GITHUB_ENV + run: echo "MACOSX_DEPLOYMENT_TARGET=$([[ ${{ matrix.os }} == 'macos-latest' ]] && echo '26.0' || echo '15.0')" >> $GITHUB_ENV - name: "Conda install" From 4b3134962043e502e1a932e8cdff488f78d5b33c Mon Sep 17 00:00:00 2001 From: Henry Wright Date: Tue, 18 Aug 2026 15:39:49 +0100 Subject: [PATCH 5/5] remove extra token refernce --- .github/workflows/ci-wheels.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml index 8f3de26c..a77d6eb8 100644 --- a/.github/workflows/ci-wheels.yml +++ b/.github/workflows/ci-wheels.yml @@ -201,6 +201,4 @@ jobs: - uses: pypa/gh-action-pypi-publish@release/v1 with: - user: __token__ - password: ${{ secrets.PYPI_API_TOKEN }} print_hash: true