File tree Expand file tree Collapse file tree 3 files changed +23
-12
lines changed Expand file tree Collapse file tree 3 files changed +23
-12
lines changed Original file line number Diff line number Diff line change @@ -12,14 +12,21 @@ jobs:
1212
1313 package :
1414 runs-on : ubuntu-latest
15+ # Required by attest-build-provenance-github.
16+ permissions :
17+ id-token : write
18+ attestations : write
1519 env :
1620 SETUPTOOLS_SCM_PRETEND_VERSION : ${{ github.event.inputs.version }}
1721
1822 steps :
19- - uses : actions/checkout@v3
23+ - uses : actions/checkout@v4
2024
2125 - name : Build and Check Package
22- 26+ 27+ with :
28+ attest-build-provenance-github : ' true'
29+
2330
2431 deploy :
2532 needs : package
@@ -30,16 +37,18 @@ jobs:
3037 contents : write # For tag and release notes.
3138
3239 steps :
33- - uses : actions/checkout@v3
40+ - uses : actions/checkout@v4
3441
3542 - name : Download Package
36- uses : actions/download-artifact@v3
43+ uses : actions/download-artifact@v4
3744 with :
3845 name : Packages
3946 path : dist
4047
4148 - name : Publish package to PyPI
42- 49+ 50+ with :
51+ attestations : true
4352
4453 - name : Push tag
4554 run : |
4958 git push origin v${{ github.event.inputs.version }}
5059
5160 - name : GitHub Release
52- uses : softprops/action-gh-release@v1
61+ uses : softprops/action-gh-release@v2
5362 with :
5463 body_path : scripts/latest-release-notes.md
5564 files : dist/*
Original file line number Diff line number Diff line change @@ -17,10 +17,13 @@ jobs:
1717
1818 package :
1919 runs-on : ubuntu-latest
20+ permissions :
21+ id-token : write
22+ attestations : write
2023 steps :
21- - uses : actions/checkout@v3
24+ - uses : actions/checkout@v4
2225 - name : Build and Check Package
23- uses : hynek/build-and-inspect-python-package@v1.5
26+ uses : hynek/build-and-inspect-python-package@v2.13.0
2427
2528 test :
2629
@@ -35,16 +38,16 @@ jobs:
3538 os : [ubuntu-latest, windows-latest]
3639
3740 steps :
38- - uses : actions/checkout@v3
41+ - uses : actions/checkout@v4
3942
4043 - name : Download Package
41- uses : actions/download-artifact@v3
44+ uses : actions/download-artifact@v4
4245 with :
4346 name : Packages
4447 path : dist
4548
4649 - name : Set up Python
47- uses : actions/setup-python@v4
50+ uses : actions/setup-python@v5
4851 with :
4952 python-version : ${{ matrix.python }}
5053
Original file line number Diff line number Diff line change 1- exclude : ' ^($|.*\.bin)'
21repos :
32 - repo : local
43 hooks :
You can’t perform that action at this time.
0 commit comments