JingsongLi opened a new pull request, #8951: URL: https://github.com/apache/paimon/pull/8951
## What changed - Declare the TestPyPI and PyPI tokens required by the reusable publishing workflow. - Pass only `TEST_PYPI_API_TOKEN` and `PYPI_API_TOKEN` from the release orchestrator. - Remove the `testpypi` and `pypi` environment bindings and update the release guide to describe repository Actions Secrets. ## Why The repository-level Actions Secrets already exist, but reusable workflows do not receive caller secrets automatically. The previous workflow also documented and selected environment-level secrets instead of using the repository secrets directly. ## Impact RC tags publish PyPaimon to TestPyPI with `TEST_PYPI_API_TOKEN`, while final tags publish to PyPI with `PYPI_API_TOKEN`. No package build behavior changes. ## Validation - Parsed both changed workflow YAML files successfully. - Ran `git diff --check`. - Passed the repository pre-push secret-leak check. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
