- Updated Python CI to streamline linting, type checking, and testing processes, including the addition of a wheel build job.
- Refactored Rust CI to utilize pre-built actions for cargo-deny and cargo-audit, improving dependency checks.
- Optimized WASM CI by consolidating build and test steps, and ensuring proper artifact uploads for both Node.js and web packages.
- Added token authentication for GitHub actions in the release workflow to enhance security.
Pushing v* tag now triggers:
1. release.yml — creates a GitHub Release (published, not draft),
pulling the release notes from CHANGELOG.md automatically.
2. CI.yml (release: published event) — builds wheels for Linux /
macOS / Windows × Python 3.10-3.13, sdist, publishes to PyPI
via trusted publisher, publishes ferro_ta_core to crates.io,
and generates SBOMs.
Pre-release tags (e.g. v1.1.0-rc.1) are marked as pre-release on
GitHub automatically.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>