Publishing to PyPI fails with HTTPError: 403 Forbidden

[hagenw]

Since today this action stopped working for me.

My configuration looks like this:

# ...
jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: release
    permissions:
      contents: write
      id-token: write
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}

# ...

    # PyPI package
    - name: Build Python package
      run: python -m build

    - name: Publish Python package to PyPI
      uses: pypa/gh-action-pypi-publish@release/v1

I have a "release" environment configured on Github, and added the repository as a trusted publisher to PyPI:

With the same settings publishing a PyPI package worked on 2024/03/27, but not on 2024/03/28. The error I'm getting:

[hagenw]

On https://status.python.org, they write:

But I don't have a new project, it's just a release for an already existing and registered project.

[mouday]

me too. mabbey will ok in the tomarrow.

[webknjaz]

Looks like this has been addressed already.

[webknjaz]

@hagenw I also strongly suggest building in a separate job for security reasons.