Release publishing from CI is now recommended with GA of Workload Identity
Published
on Nov 10, 2026
With the hex team’s just announced general availability of Workload Identity, comes a new era of package security. It was previously not recommended to publish releases from CI, but now with Workload Identity CI publishing is the recommended approach. This is a major step forward in both securing package supply chain as well as lowering release process complexity for maintainers.