Revisit GitHub Actions

Author: r-brown

.github/workflows/netlicensing-publish-pypi.yml

@@ -1,31 +1,18 @@
 # Publishes the package to PyPI when a GitHub Release is *published*
-# (not on draft creation — only when you click "Publish release").
-#
-# Authentication: uses PyPI Trusted Publisher (OIDC) — no long-lived secrets
-# needed.  Configure a Trusted Publisher for this repo on pypi.org first:
-#   https://docs.pypi.org/trusted-publishers/adding-a-publisher/
-#
-# If you prefer an API token instead, remove the `environment` + `permissions`
-# blocks and uncomment:
-#   password: ${{ secrets.PYPI_API_TOKEN }}
-# in the "Publish" step below.
 
 name: Python Client - Publish to PyPI
 
 on:
   release:
     types: [published]
 
-# Restrict the default GITHUB_TOKEN to read-only.
-# The publish job adds id-token: write for OIDC Trusted Publisher.
 permissions:
   contents: read
 
 jobs:
   test:
     name: "Test before publish"
     runs-on: ubuntu-latest
-    # inherits workflow-level permissions: contents: read
 
     steps:
       - uses: actions/checkout@v4
@@ -48,7 +35,7 @@ jobs:
 
     environment: pypi
     permissions:
-      id-token: write   # required for OIDC Trusted Publisher
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4
@@ -69,6 +56,3 @@ jobs:
 
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        # Uncomment the next line to use an API token instead of Trusted Publisher:
-        # with:
-        #   password: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/netlicensing-python-ci.yml

@@ -1,6 +1,3 @@
-# Runs on every push / pull-request against master.
-# Matrix: Python 3.11 – 3.14  |  type-check (mypy) + tests (pytest) + coverage
-
 name: Python Client - CI
 
 on:
@@ -9,8 +6,6 @@ on:
   pull_request:
     branches: [master]
 
-# Restrict the default GITHUB_TOKEN to read-only.
-# Individual jobs add back only the permissions they need.
 permissions:
   contents: read
 

pyproject.toml

@@ -70,7 +70,7 @@ markers = [
 
 [tool.black]
 line-length = 120
-target-version = ["py310"]
+target-version = ["py311"]
 
 [tool.isort]
 profile = "black"