We made python publishing a "reusable workflow" and part of publish.yml
Apparently this isnt a supported path for PyPi trusted publishing...
Ran into this in 0.9.1 release. Workaround is to run release_python.yml directly
##[debug]Authenticating to https://upload.pypi.org/legacy/ via Trusted Publishing
##[debug]Selected Trusted Publishing Exchange Endpoint: https://upload.pypi.org/_/Oidc/Mint-Token
Warning: Potential workflow misconfiguration:
The claims in this token suggest that the calling workflow is a reusable workflow.
In particular, this action was initiated by:
apache/iceberg-rust/.github/workflows/release_python.yml@refs/tags/v0.9.1-rc.2
Whereas its parent workflow is:
apache/iceberg-rust/.github/workflows/publish.yml@refs/tags/v0.9.1-rc.2
Reusable workflows are **not currently supported** by PyPI's Trusted Publishing
functionality, and are subject to breakage. Users are **strongly encouraged**
to avoid using reusable workflows for Trusted Publishing until support
becomes official. Please, do not report bugs if this breaks.
We made python publishing a "reusable workflow" and part of publish.yml
Apparently this isnt a supported path for PyPi trusted publishing...
Ran into this in 0.9.1 release. Workaround is to run release_python.yml directly