This is an automated email from the ASF dual-hosted git repository.

yuxia pushed a commit to tag v0.1.0
in repository https://gitbox.apache.org/repos/asf/fluss-rust.git

commit 43d38a9e9d33b5ccbb7dfea434d24c139662b543
Author: luoyuxia <[email protected]>
AuthorDate: Fri Apr 3 10:17:17 2026 +0800

    ci: fix release rust issue
---
 .github/workflows/release_rust.yml     | 13 ++-----------
 website/docs/release/create-release.md |  3 +++
 2 files changed, 5 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/release_rust.yml 
b/.github/workflows/release_rust.yml
index 0a567a6..7ff7c0b 100644
--- a/.github/workflows/release_rust.yml
+++ b/.github/workflows/release_rust.yml
@@ -19,8 +19,7 @@
 # Trigger: push tag only (e.g. v0.1.0).
 # Pre-release tags (containing '-') do not publish; release tags publish to 
crates.io.
 #
-# Token auth: set repo variable CARGO_USE_TOKEN_AUTH = 'true' and add secret 
CARGO_REGISTRY_TOKEN.
-# Trusted Publishing (OIDC): leave CARGO_USE_TOKEN_AUTH unset; token is 
obtained via OIDC (no secret).
+# Token auth: add secret CARGO_REGISTRY_TOKEN for crates.io publishing.
 
 name: Release Rust
 
@@ -34,7 +33,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -46,15 +44,8 @@ jobs:
       - name: Dry run (crates/fluss)
         run: cargo publish -p fluss-rs --dry-run
 
-      - name: Get crates.io token (OIDC)
-        if: startsWith(github.ref, 'refs/tags/') && !contains(github.ref, '-') 
&& vars.CARGO_USE_TOKEN_AUTH != 'true'
-        uses: rust-lang/crates-io-auth-action@v1
-        id: auth
-        with:
-          token-type: publish
-
       - name: Publish fluss-rs to crates.io
         if: startsWith(github.ref, 'refs/tags/') && !contains(github.ref, '-')
         run: cargo publish -p fluss-rs
         env:
-          CARGO_REGISTRY_TOKEN: "${{ vars.CARGO_USE_TOKEN_AUTH == 'true' && 
secrets.CARGO_REGISTRY_TOKEN || steps.auth.outputs.token }}"
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
diff --git a/website/docs/release/create-release.md 
b/website/docs/release/create-release.md
index ba9c875..5df8443 100644
--- a/website/docs/release/create-release.md
+++ b/website/docs/release/create-release.md
@@ -39,10 +39,13 @@ Anybody can propose a release (e.g. on the dev [mailing 
list](https://fluss.apac
 
 Before your first release, perform one-time configuration. See **[Release 
Manager 
Preparation](https://fluss.apache.org/community/how-to-release/release-manager-preparation/)**
 (GPG key, etc.). For fluss-rust you do **not** need Nexus/Maven; you only need 
GPG for signing the source archive and (optionally) git signing.
 
+For GitHub Actions publishing, configure the repository secret 
`CARGO_REGISTRY_TOKEN` with a crates.io API token from an account allowed to 
publish `fluss-rs`. The `Release Rust` workflow uses this secret directly when 
a release tag is pushed.
+
 **Checklist (one-time)**
 
 - [ ] GPG key set up and published to 
[KEYS](https://downloads.apache.org/incubator/fluss/KEYS) or Apache account
 - [ ] Git configured to use your GPG key for signing tags
+- [ ] GitHub Actions secret `CARGO_REGISTRY_TOKEN` configured for crates.io 
publishing
 
 ### 1. Install Rust (and optional: just)
 

Reply via email to