tag-publish 1.4.0.dev2__tar.gz → 1.4.0.dev3__tar.gz

{tag_publish-1.4.0.dev2 → tag_publish-1.4.0.dev3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tag-publish
-Version: 1.4.0.dev2
+Version: 1.4.0.dev3
 Summary: Tools used to publish Python packages, Docker images and Helm charts for GitHub tag and branch
 License: FreeBSD
 License-File: LICENSE

{tag_publish-1.4.0.dev2 → tag_publish-1.4.0.dev3}/pyproject.toml

@@ -47,7 +47,7 @@ prospector-profile-utils = "1.27.0"
 types-requests = "2.33.0.20260712"
 types-pyyaml = "6.0.12.20260724"
 ruff = "0.15.21"
-pylint = "4.0.7"
+pylint = "4.0.9"
 
 [tool.poetry-dynamic-versioning]
 enable = false
@@ -96,7 +96,7 @@ include = [
 ]
 requires-python = ">=3.11"
 dependencies = ["PyYAML<7,>=6", "security-md<2,>=1", "githubkit<1,>=0"]
-version = "1.4.0.dev2"
+version = "1.4.0.dev3"
 
 [project.optional-dependencies]
 pypi = ["requests<3,>=2", "twine<7,>=6", "id<2,>=1"]

{tag_publish-1.4.0.dev2 → tag_publish-1.4.0.dev3}/tag_publish/cli.py

@@ -193,19 +193,26 @@ def _handle_pypi_publish(
     success = True
     pypi_config = config.get("pypi", {})
     if pypi_config:
-        tag_publish.require_extra("pypi", "id", "requests", "twine")
-        # Imported here because it depends on optional dependencies provided by the `pypi` extra.
-        from tag_publish.lib import oidc  # noqa: PLC0415
+        packages = [
+            package
+            for package in pypi_config.get("packages", [])
+            if package.get("group", tag_publish.configuration.PIP_PACKAGE_GROUP_DEFAULT) == group
+        ]
+        if packages:
+            tag_publish.require_extra("pypi", "id", "requests", "twine")
+            publish = version_type in pypi_config.get(
+                "versions_type",
+                tag_publish.configuration.PYPI_VERSIONS_DEFAULT,
+            )
+            if publish:
+                # Imported here because it depends on optional dependencies provided by the `pypi` extra.
+                from tag_publish.lib import oidc  # noqa: PLC0415
 
-        if "packages" in pypi_config:
-            oidc.pypi_login()
+                # The trusted publisher is configured for the workflow that really publishes the packages,
+                # asking a token for another group would be refused by PyPI with `invalid-publisher`.
+                oidc.pypi_login()
 
-        for package in pypi_config.get("packages", []):
-            if package.get("group", tag_publish.configuration.PIP_PACKAGE_GROUP_DEFAULT) == group:
-                publish = version_type in pypi_config.get(
-                    "versions_type",
-                    tag_publish.configuration.PYPI_VERSIONS_DEFAULT,
-                )
+            for package in packages:
                 folder = package.get("folder", tag_publish.configuration.PYPI_PACKAGE_FOLDER_DEFAULT)
                 if dry_run:
                     print(f"{'Publishing' if publish else 'Checking'} '{folder}' to pypi, skipping (dry run)")