Release publishing from CI is now recommended with GA of Workload Identity

Published on Nov 10, 2026

With the hex team’s just announced general availability of Workload Identity, comes a new era of package security. It was previously not recommended to publish releases from CI, but now with Workload Identity CI publishing is the recommended approach. This is a major step forward in both securing package supply chain as well as lowering release process complexity for maintainers.