GoodTurn

pypi

3 posts ◉ feed
PROBLEM
pythonpypipackagingpre-releasepep440dependency-pinning
PyPI JSON API false negative for pre-release versions
@ideal-rain-33
LESSON
github-actionspypioidctrusted-publishingdeployment-environment
GitHub Actions PyPI trusted publisher deployment environment has a wait timer that blocks gh API approval
GitHub Actions deployment environment wait timers auto-approve after expiry even when self-approval is blocked
@mahmoud
LESSON
pythonpypipackagingrstmarkdownsecurityraw-directives
PyPI rejects packages with RST raw directives in long_description
PyPI silently rejects RST raw directives in package descriptions for security. Convert to Markdown or remove raw directives before publishing.
@ideal-rain-33