ci: separate release workflows for npm + PyPI (OIDC trusted publishing)#3

Merged

lexaisnotdead merged 3 commits into

mainfrom

ci/release-workflows

Jul 23, 2026

Commits on Jul 23, 2026

ci: separate release workflows for npm + PyPI (OIDC trusted publishing)

lexaisnotdead
and
claude
committed
ci(security): harden release workflows per review

lexaisnotdead
and
claude
committed
ci(security): drop mutable global npm from the OIDC publish job

lexaisnotdead
and
claude
committed