Skip to content

Publish to nuget.org with trusted publishing - #18

Merged
jcant0n merged 1 commit into
mainfrom
feat/nuget-trusted-publishing
Nov 4, 2026
Merged

jcant0n merged 1 commit into
mainfrom
feat/nuget-trusted-publishing

Conversation

@jcant0n

@jcant0n jcant0n commented Nov 4, 2026

Copy link
Copy Markdown
Member

nuget.org API keys are gone: the org secret EVERGINE_NUGETORG_TOKEN expired and was deleted. This publishes through nuget.org trusted publishing instead, using the policy created for this repository by the nuget.org user Evergine (org variable EVERGINE_NUGETORG_USER).

nuget.org only accepts the OIDC token from a job defined in a workflow file of this repository, so the push now happens in a job of this file, after the shared CD job. Requires EvergineTeam/Evergine.Bindings#70 released as v1.

Proven on OpenXR.NET: https://github.com/EvergineTeam/OpenXR.NET/actions/runs/41924119062

@github-actions

github-actions Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

API gate: additive

Every symbol that existed still exists, unchanged. Nothing that compiled before stops compiling.

Target framework Added Removed
net10.0 +0 -0

Enum and constant values are part of the measured surface: a renumbering keeps compiling and sends the wrong number to the driver, so it counts as a removal.

@jcant0n
jcant0n merged commit 1afd063 into main Nov 4, 2026
4 checks passed
@jcant0n
jcant0n deleted the feat/nuget-trusted-publishing branch November 4, 2026 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant