docs(adr-184): record P1 OIDC workflow migration status (cc153e8b5), await pypi.org registration

This commit is contained in:
ruv
2026-07-21 16:07:40 -07:00
parent cc153e8b56
commit dfc4c1abd6
@@ -300,6 +300,16 @@ migrate promote publish #785
- [ ] (fallback per §3.2) If OIDC is declined: regenerate `PYPI_API_TOKEN`, keep
`password:` inputs, and skip the rest of P1.
**Status 2026-07-21:** pip-release.yml migrated to OIDC Trusted Publishing
(commit cc153e8b5) — id-token: write + environment: pypi on both publish jobs,
all four PYPI_API_TOKEN password inputs removed. Awaiting the §3.1 manual Trusted
Publisher registration on pypi.org (owner=ruvnet, repo=RuView,
workflow=pip-release.yml, environment=pypi) for BOTH wifi-densepose and ruview
before this path activates. Until then the publish step will fail 'no trusted
publisher configured' if the rotated PYPI_API_TOKEN interim credential is fully
removed — recommend keeping both paths (OIDC first with a token fallback per §3.2)
until the OIDC path is confirmed working.
### P2 — Version promotion + changelog
- [ ] `python/pyproject.toml`: `version = "2.0.0"` (drop the `a1` suffix).