From 6dda06384040e5baab656e86594a81e47b71093f Mon Sep 17 00:00:00 2001
From: "Edward Z. Yang" <ezyang@meta.com>
Date: Mon, 26 Feb 2024 13:01:45 -0800
Subject: [PATCH] Setup trusted release

Signed-off-by: Edward Z. Yang <ezyang@meta.com>
---
 .github/workflows/CI.yml | 4 ++--
 plan.txt                 | 5 +++++
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 3d50e92..01aa7c6 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -19,6 +19,7 @@ concurrency:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   linux:
@@ -89,6 +90,7 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    environment: release
     if: "startsWith(github.ref, 'refs/tags/')"
     needs: [linux, windows, macos, sdist]
     steps:
@@ -97,8 +99,6 @@ jobs:
           name: wheels
       - name: Publish to PyPI
         uses: PyO3/maturin-action@v1
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
         with:
           command: upload
           args: --non-interactive --skip-existing *
diff --git a/plan.txt b/plan.txt
index 047e405..be2762e 100644
--- a/plan.txt
+++ b/plan.txt
@@ -149,3 +149,8 @@ feb 23 ideas
 - post_grad_graph and output_code occasionally has no context; how to orient
   in this situation :think:
 - would like to know code hash, so can generate links to files
+
+
+- recompile
+  - dynamic shape dimension changed
+  - just collect them all at once place