Skip to content

fix: use policy creator's nuget.org username for trusted publishing login - #646

Merged
rexm merged 1 commit into
masterfrom
fix/nuget-trusted-publishing-user
Aug 5, 2026
Merged

fix: use policy creator's nuget.org username for trusted publishing login#646
rexm merged 1 commit into
masterfrom
fix/nuget-trusted-publishing-user

Conversation

@rexm

@rexm rexm commented Aug 5, 2026

Copy link
Copy Markdown
Member

Summary

  • Follow-up to fix: switch NuGet release publishing to Trusted Publishing (OIDC) #644. The first live release attempt failed the OIDC token exchange: nuget.org returned "No matching trust policy owned by user 'Handlebars-Net' was found. Make sure you are using the username of the policy creator, not the policy owner."
  • The trusted publishing policy is owned by the Handlebars-Net org, but was created under rexm's nuget.org account — NuGet/login's user input needs the creator's username, not the owner.

Test plan

  • Merge this PR
  • Move the 2.2.0 tag to the merge commit and re-trigger the release to confirm the package publishes

…ogin

nuget.org's token exchange requires the username of whoever created
the trusted publishing policy, not the policy's owner account —
Handlebars-Net is the org that owns the policy, but rexm created it.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@rexm
rexm merged commit 3310b56 into master Aug 5, 2026
3 checks passed
@rexm
rexm deleted the fix/nuget-trusted-publishing-user branch August 5, 2026 01:19
@sonarqubecloud

sonarqubecloud Bot commented Aug 5, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant