Merge https://github.com/jaraco/tidelift

.travis.yml

@@ -19,7 +19,9 @@ jobs:
     - TWINE_USERNAME=jaraco
     # TWINE_PASSWORD
     - secure: VXM9F3HLDPprEY3JRlX6eH+yngucMHrqpUMeo4zgnFOc5yJUs7RP3uJ87O9IHllOUc7VR+nu/ye7HJk9y8Ux8X53S5UiH/s3/7rHPWP5IyCZBuDMZ3ouSxYKCWyMd6h/tkmVjNJIkV/0ZUhTJlwaODKwqegZ0twEIoRQnVIDTcs=
-    - TOX_TESTENV_PASSENV="TWINE_USERNAME TWINE_PASSWORD"
+    # TIDELIFT_TOKEN
+    - secure: N1YHVPGUZl324ntMUdEUCfuMZb9eTDgEJ5lXQne3WV8bi0DLmoUgDM3z1Hz7RoZY8x8qHLtInNi+8BjqoHwLrbC06A0MZ1aSlqY8pq+nrI6WDQCwFY6BNggl302YiuGdwUtL+W1Yu3SqbFELWMNNM106u+/paZqgt0dP4nE3Qhg=
+    - TOX_TESTENV_PASSENV="TWINE_USERNAME TWINE_PASSWORD TIDELIFT_TOKEN"
     script: tox -e release
 
 cache: pip

README.rst

@@ -339,10 +339,9 @@ contributors.
 Security Contact
 ================
 
-If you wish to report a security vulnerability, the public disclosure
-of which may exacerbate the risk, please
-`Contact Tidelift security <https://tidelift.com/security>`_,
-which will coordinate the fix and disclosure privately.
+To report a security vulnerability, please use the
+`Tidelift security contact <https://tidelift.com/security>`_.
+Tidelift will coordinate the fix and disclosure.
 
 Making Releases
 ===============

tox.ini

@@ -27,7 +27,9 @@ deps =
 	# workaround for https://github.com/pypa/twine/issues/423
 	git+https://github.com/pypa/twine
 	path.py
+	jaraco.tidelift
 commands =
 	python -c "import path; path.Path('dist').rmtree_p()"
 	python -m pep517.build .
 	python -m twine upload dist/*
+	python -m jaraco.tidelift.publish-release-notes