From e533bdd877e8b2af8e54cce24ccf7a53ed2bc3ac Mon Sep 17 00:00:00 2001
From: Anthony Volk <anth.volk@gmail.com>
Date: Tue, 23 Jun 2026 23:00:02 +0200
Subject: [PATCH] Separate PyPI and bundle release assets

---
 .github/workflows/push.yaml                       | 15 ++++++++-------
 .../separate-release-assets-from-pypi.fixed.md    |  1 +
 2 files changed, 9 insertions(+), 7 deletions(-)
 create mode 100644 changelog.d/separate-release-assets-from-pypi.fixed.md

diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index 834e6bb9..de05657c 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -157,20 +157,21 @@ jobs:
       - name: Build package
         run: python -m build
       - name: Export bundle release assets
-        run: python scripts/export_bundle_release_assets.py --dist-dir dist
+        run: python scripts/export_bundle_release_assets.py --dist-dir release-assets
       - name: Verify bundle package metadata
         env:
           POLICYENGINE_SKIP_COUNTRY_IMPORTS: "1"
         run: |
           VERSION=$(python .github/fetch_version.py)
           policyengine bundle verify --country us --country uk --packages-only --json \
-            > "dist/policyengine-bundle-$VERSION.verification.json"
+            > "release-assets/policyengine-bundle-$VERSION.verification.json"
       - name: Publish a Python distribution to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           user: __token__
           password: ${{ secrets.PYPI }}
-          skip_existing: true
+          skip-existing: true
+          packages-dir: dist
       - name: Create GitHub Release
         run: |
           VERSION=$(python .github/fetch_version.py)
@@ -178,7 +179,7 @@ jobs:
             --title "v$VERSION" \
             --notes "See [CHANGELOG.md](https://github.com/PolicyEngine/policyengine.py/blob/main/CHANGELOG.md) for details." \
             --latest \
-            "dist/policyengine-bundle-$VERSION.json" \
-            "dist/policyengine-bundle-$VERSION.constraints.txt" \
-            "dist/policyengine-bundle-$VERSION.citation.txt" \
-            "dist/policyengine-bundle-$VERSION.verification.json"
+            "release-assets/policyengine-bundle-$VERSION.json" \
+            "release-assets/policyengine-bundle-$VERSION.constraints.txt" \
+            "release-assets/policyengine-bundle-$VERSION.citation.txt" \
+            "release-assets/policyengine-bundle-$VERSION.verification.json"
diff --git a/changelog.d/separate-release-assets-from-pypi.fixed.md b/changelog.d/separate-release-assets-from-pypi.fixed.md
new file mode 100644
index 00000000..34f8aea3
--- /dev/null
+++ b/changelog.d/separate-release-assets-from-pypi.fixed.md
@@ -0,0 +1 @@
+Keep bundle release sidecar files out of the PyPI upload directory during publication.