Skip to content

fix(ci): move PyPI publish before SBOM generation#430

Merged
wphillipmoore merged 2 commits into
developfrom
bugfix/429-fix-sbom-publish-ordering
Mar 2, 2026
Merged

fix(ci): move PyPI publish before SBOM generation#430
wphillipmoore merged 2 commits into
developfrom
bugfix/429-fix-sbom-publish-ordering

Conversation

@wphillipmoore

Copy link
Copy Markdown
Collaborator

Pull Request

Summary

  • Move PyPI publish before SBOM generation to fix InvalidDistribution error

Issue Linkage

Testing

  • markdownlint
  • uv run python3 scripts/dev/validate_local.py

Notes

Reverts the ordering regression from #392. The SBOM writes a .cdx.json file into dist/ which causes pypa/gh-action-pypi-publish to fail with InvalidDistribution. PyPI publish must run before SBOM generation, matching the original fix in #284.

Co-Authored-By: wphillipmoore-claude <255925739+wphillipmoore-claude@users.noreply.github.com>
@wphillipmoore wphillipmoore enabled auto-merge (squash) March 2, 2026 14:22
@wphillipmoore wphillipmoore mentioned this pull request Mar 2, 2026
@wphillipmoore wphillipmoore merged commit 0d1c4bd into develop Mar 2, 2026
16 checks passed
@wphillipmoore wphillipmoore deleted the bugfix/429-fix-sbom-publish-ordering branch March 2, 2026 14:38
@wphillipmoore wphillipmoore mentioned this pull request Mar 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix: SBOM generation breaks PyPI publish (regression from #392)

1 participant