TokenPak v1.5.3

⚠️ PyPI publish failed for v1.5.3 — use v1.5.4 instead.

The Release TokenPak workflow ran on the v1.5.3 tag. The Run Tests, Build Distribution, and Create GitHub Release jobs all completed green, proving the test-suite recovery work landed correctly. The final Publish to PyPI step failed with InvalidDistribution: Unknown distribution format: 'SHA256SUMS' because the prior release.yml placed SHA256SUMS inside dist/ and pypa/gh-action-pypi-publish enumerates dist/* and rejects every non-.whl/.tar.gz entry. This was a pre-existing release-workflow defect, not a v1.5.3 content defect.

Action for users: install tokenpak==1.5.4 — it contains every line of v1.5.3 plus the workflow fix, and is the first clean release on PyPI in this line.

Action for the repo: the workflow defect is fixed in v1.5.4 (see PR #154): SHA256SUMS now lives at the repo root and never inside dist/; new pre-upload + pre-publish dist-purity guards prevent regression.

v1.5.3 is retained as a historical GitHub-tag-only release. The tag is not retagged or force-pushed.

Original release notes

Release v1.5.3

Installation (use v1.5.4)

pip install tokenpak==1.5.4

What's New

See CHANGELOG.md for details (entries for both v1.5.3 and v1.5.4).

Checksums

981fbecf4a4f684a0be623343c41f63d5089d276a2b3d2c57031c721badd079a tokenpak-1.5.3-py3-none-any.whl
daba3059b7293aa0b05e5f9faa06c1a566ee420fe833415f9e6e3285ae235374 tokenpak-1.5.3.tar.gz