Skip to content

Use trusted publishing for regex crates - #2895

Draft
Kobzol wants to merge 1 commit into
rust-lang:mainfrom
Kobzol:track-regex-crates
Draft

Kobzol wants to merge 1 commit into
rust-lang:mainfrom
Kobzol:track-regex-crates

Conversation

@Kobzol

@Kobzol Kobzol commented Oct 31, 2026 •

Copy link
Copy Markdown
Member

Companion PR: rust-lang/regex#1412

@Kobzol
Kobzol force-pushed the track-regex-crates branch from 096967a to 3e0866c Compare October 31, 2026 19:00
@github-actions

github-actions Bot commented Oct 31, 2026 •

Copy link
Copy Markdown
Dry-run check results

[WARN  rust_team::sync] sync-team is running in dry mode, no changes will be applied.
[INFO  rust_team::sync] synchronizing crates-io
[INFO  rust_team::sync] 💻 Trusted Publishing Crate Diffs:
      Setting trusted publishing only option for krate `regex` to `true`
      Removing `user` owner `BurntSushi` from krate `regex`
      Removing `team` owner `github:rust-lang-nursery:regex-owners` from krate `regex`
      Setting trusted publishing only option for krate `regex-automata` to `true`
      Removing `user` owner `BurntSushi` from krate `regex-automata`
      Setting trusted publishing only option for krate `regex-cli` to `true`
      Removing `user` owner `BurntSushi` from krate `regex-cli`
      Setting trusted publishing only option for krate `regex-lite` to `true`
      Removing `user` owner `BurntSushi` from krate `regex-lite`
      Setting trusted publishing only option for krate `regex-syntax` to `true`
      Removing `user` owner `BurntSushi` from krate `regex-syntax`
      Removing `team` owner `github:rust-lang-nursery:regex-owners` from krate `regex-syntax`
      Setting trusted publishing only option for krate `regex-test` to `true`
      Removing `user` owner `BurntSushi` from krate `regex-test`
      Setting trusted publishing only option for krate `rure` to `true`
      Removing `user` owner `BurntSushi` from krate `rure`

[INFO rust_team::sync] synchronizing github
[INFO rust_team::sync] Rate limits before: REST 14012/15000 remaining, resets at 2026-11-08 09:09:47 UTC, GraphQL 12390/12500 remaining, resets at 2026-11-08 09:09:56 UTC
[INFO rust_team::sync] 💻 Repo Diffs:
📝 Editing repo 'rust-lang/regex':
Environments:
➕ Create: publish
Branches: master
Tags: *

[INFO rust_team::sync] Rate limits after: REST 13024/15000 remaining, resets at 2026-11-08 09:09:47 UTC, GraphQL 12300/12500 remaining, resets at 2026-11-08 09:09:56 UTC
[INFO rust_team::sync] Consumed 988 REST calls and 90 GraphQL calls

@BurntSushi

Copy link
Copy Markdown
Member

I think this LGTM.

To confirm: does this still allow publishing crates directly? (Just to ensure there's a way to do publishing until we're sure that trusted publishing works.)

@Kobzol

Kobzol commented Nov 2, 2026

Copy link
Copy Markdown
Member Author

It does not. If we merge this PR, you will lose access to regex crates on crates.io, and it will only be possible to publish new releases through regex's CI. You will only be able to yank. (note that this is the stage that we're trying to achieve for all crates owned by rust-lang-owner, to reduce account compromise risk)

@Kobzol
Kobzol force-pushed the track-regex-crates branch from 3e0866c to f6ecb10 Compare November 8, 2026 08:11

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants