From e663b815727054a16198f599b9cc825899264ce2 Mon Sep 17 00:00:00 2001 From: Jason Doyle Date: Fri, 4 Sep 2026 09:55:41 -0700 Subject: [PATCH 1/2] Document NuGet package availability --- CHANGELOG.md | 2 ++ README.md | 8 ++++---- docs/PORT_RELEASES.md | 7 +++++++ ports/dotnet/README.md | 8 ++++---- 4 files changed, 17 insertions(+), 8 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2bf08d0..94db8da 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,8 @@ - Added OIDC trusted-publishing workflows for Python `0.1.1` on PyPI and `WorldCut`/`WorldCut.Tool` `0.1.1` on NuGet.org, including protected tag validation, exact-artifact checks, and language-specific GitHub releases. +- Published `WorldCut` and `WorldCut.Tool` `0.1.1` on NuGet.org with + repository signatures and verified package contents. ## 0.2.0 - 2026-09-04 diff --git a/README.md b/README.md index c826ef3..3bd74c3 100644 --- a/README.md +++ b/README.md @@ -59,11 +59,11 @@ results, as described in | TypeScript | 0.1 / 0.1.2 | Reference package with documented integrations | | [Go](ports/go) | 0.1 / 0.1.2 | Independent conformant verifier and CLI; integrations not yet included | | [Python](ports/python) | 0.1 / 0.1.2 | Independent conformant verifier and CLI; integrations not yet included | -| [.NET](ports/dotnet) | 0.1 / 0.1.2 | Independent conformant verifier and CLI for .NET 8 and .NET 10; integrations not yet included | +| [.NET](ports/dotnet) | 0.1 / 0.1.2 | [`WorldCut`](https://www.nuget.org/packages/WorldCut/0.1.1) library and [`WorldCut.Tool`](https://www.nuget.org/packages/WorldCut.Tool/0.1.1) CLI for .NET 8 and .NET 10 | -Go is available through its public module tag. Python and .NET registry release -workflows are configured for version `0.1.1`; until those registry releases are -live, their port READMEs also provide protected source-tag installation paths. +Go is available through its public module tag, and .NET `0.1.1` is live on +NuGet.org. Python `0.1.1` is built and its trusted-publishing workflow is ready, +but the PyPI publisher still needs to be activated before that registry release. Registry release configuration is documented in [`docs/PORT_RELEASES.md`](docs/PORT_RELEASES.md). diff --git a/docs/PORT_RELEASES.md b/docs/PORT_RELEASES.md index 7d194ab..474b3f6 100644 --- a/docs/PORT_RELEASES.md +++ b/docs/PORT_RELEASES.md @@ -8,6 +8,13 @@ Python and .NET use registry-specific protected tag workflows: | Python | PyPI | `release-python.yml` | `pypi` | `ports/python/v*` | | .NET | NuGet.org | `release-dotnet.yml` | `nuget` | `ports/dotnet/v*` | +Current registry status: + +- .NET `0.1.1` is published as + [`WorldCut`](https://www.nuget.org/packages/WorldCut/0.1.1) and + [`WorldCut.Tool`](https://www.nuget.org/packages/WorldCut.Tool/0.1.1). +- Python `0.1.1` is awaiting PyPI pending-publisher activation. + Both workflows: - require an annotated protected tag whose version matches the package; diff --git a/ports/dotnet/README.md b/ports/dotnet/README.md index 32abff3..4f0026f 100644 --- a/ports/dotnet/README.md +++ b/ports/dotnet/README.md @@ -9,8 +9,8 @@ Python, or Go, and without consuming generated TypeScript output. | Package | Purpose | | --- | --- | -| `WorldCut` | Class library. No third-party package dependencies. | -| `WorldCut.Tool` | The `worldcut-dotnet` .NET global tool. | +| [`WorldCut`](https://www.nuget.org/packages/WorldCut/0.1.1) | Class library. No third-party package dependencies. | +| [`WorldCut.Tool`](https://www.nuget.org/packages/WorldCut.Tool/0.1.1) | The `worldcut-dotnet` .NET global tool. | ## Framework support @@ -23,14 +23,14 @@ the .NET 8 runtime is additionally required to run the `net8.0` test pass. ## Install -Install the library and global tool after the `0.1.1` NuGet.org release is live: +Install the library and global tool from NuGet.org: ```sh dotnet add package WorldCut --version 0.1.1 dotnet tool install --global WorldCut.Tool --version 0.1.1 ``` -Until then, or when a local feed is preferred, build from the protected tag: +To build an isolated local feed instead, use the protected source tag: ```sh git clone --branch ports/dotnet/v0.1.1 --depth 1 https://github.com/Jason-Doyle/WorldCut.git From 18891179c9ed5b7696cf3f5bab61a0da6f1763b9 Mon Sep 17 00:00:00 2001 From: Jason Doyle Date: Fri, 4 Sep 2026 10:07:23 -0700 Subject: [PATCH 2/2] Document PyPI package availability --- CHANGELOG.md | 2 ++ README.md | 9 +++++---- docs/PORT_RELEASES.md | 4 +++- ports/python/README.md | 4 ++-- 4 files changed, 12 insertions(+), 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 94db8da..b271bfa 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,8 @@ validation, exact-artifact checks, and language-specific GitHub releases. - Published `WorldCut` and `WorldCut.Tool` `0.1.1` on NuGet.org with repository signatures and verified package contents. +- Published Python `worldcut` `0.1.1` on PyPI with verified PEP 740 + attestations for the wheel and source distribution. ## 0.2.0 - 2026-09-04 diff --git a/README.md b/README.md index 3bd74c3..3c1ceeb 100644 --- a/README.md +++ b/README.md @@ -58,12 +58,13 @@ results, as described in | --- | --- | --- | | TypeScript | 0.1 / 0.1.2 | Reference package with documented integrations | | [Go](ports/go) | 0.1 / 0.1.2 | Independent conformant verifier and CLI; integrations not yet included | -| [Python](ports/python) | 0.1 / 0.1.2 | Independent conformant verifier and CLI; integrations not yet included | +| [Python](ports/python) | 0.1 / 0.1.2 | [`worldcut`](https://pypi.org/project/worldcut/0.1.1/) package and `worldcut-py` CLI for Python 3.11+ | | [.NET](ports/dotnet) | 0.1 / 0.1.2 | [`WorldCut`](https://www.nuget.org/packages/WorldCut/0.1.1) library and [`WorldCut.Tool`](https://www.nuget.org/packages/WorldCut.Tool/0.1.1) CLI for .NET 8 and .NET 10 | -Go is available through its public module tag, and .NET `0.1.1` is live on -NuGet.org. Python `0.1.1` is built and its trusted-publishing workflow is ready, -but the PyPI publisher still needs to be activated before that registry release. +Go is available through its public module tag, Python `0.1.1` is live on PyPI, +and .NET `0.1.1` is live on NuGet.org. The Python release includes PEP 740 +digital attestations bound to this repository and its protected release +workflow. Registry release configuration is documented in [`docs/PORT_RELEASES.md`](docs/PORT_RELEASES.md). diff --git a/docs/PORT_RELEASES.md b/docs/PORT_RELEASES.md index 474b3f6..0e5b8a8 100644 --- a/docs/PORT_RELEASES.md +++ b/docs/PORT_RELEASES.md @@ -13,7 +13,9 @@ Current registry status: - .NET `0.1.1` is published as [`WorldCut`](https://www.nuget.org/packages/WorldCut/0.1.1) and [`WorldCut.Tool`](https://www.nuget.org/packages/WorldCut.Tool/0.1.1). -- Python `0.1.1` is awaiting PyPI pending-publisher activation. +- Python `0.1.1` is published as + [`worldcut`](https://pypi.org/project/worldcut/0.1.1/) with PEP 740 digital + attestations for both the wheel and source distribution. Both workflows: diff --git a/ports/python/README.md b/ports/python/README.md index 449905d..4a68fa4 100644 --- a/ports/python/README.md +++ b/ports/python/README.md @@ -6,13 +6,13 @@ required. ## Install -Install from PyPI after the `0.1.1` registry release is live: +Install from PyPI: ```sh python -m pip install worldcut==0.1.1 ``` -Until then, or when a source install is preferred, use the protected tag: +When a source install is preferred, use the protected tag: ```sh python -m pip install "worldcut @ git+https://github.com/Jason-Doyle/WorldCut.git@ports/python/v0.1.1#subdirectory=ports/python"