Setup trusted release

Signed-off-by: Edward Z. Yang <[email protected]>

.github/workflows/CI.yml

@@ -19,6 +19,7 @@ concurrency:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   linux:
@@ -89,6 +90,7 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    environment: release
     if: "startsWith(github.ref, 'refs/tags/')"
     needs: [linux, windows, macos, sdist]
     steps:
@@ -97,8 +99,6 @@ jobs:
           name: wheels
       - name: Publish to PyPI
         uses: PyO3/maturin-action@v1
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
         with:
           command: upload
           args: --non-interactive --skip-existing *

plan.txt

@@ -149,3 +149,8 @@ feb 23 ideas
 - post_grad_graph and output_code occasionally has no context; how to orient
   in this situation :think:
 - would like to know code hash, so can generate links to files
+
+
+- recompile
+  - dynamic shape dimension changed
+  - just collect them all at once place