File tree Expand file tree Collapse file tree 3 files changed +23
-12
lines changed Expand file tree Collapse file tree 3 files changed +23
-12
lines changed Original file line number Diff line number Diff line change @@ -12,14 +12,21 @@ jobs:
12
12
13
13
package :
14
14
runs-on : ubuntu-latest
15
+ # Required by attest-build-provenance-github.
16
+ permissions :
17
+ id-token : write
18
+ attestations : write
15
19
env :
16
20
SETUPTOOLS_SCM_PRETEND_VERSION : ${{ github.event.inputs.version }}
17
21
18
22
steps :
19
- - uses : actions/checkout@v3
23
+ - uses : actions/checkout@v4
20
24
21
25
- name : Build and Check Package
22
-
26
+
27
+ with :
28
+ attest-build-provenance-github : ' true'
29
+
23
30
24
31
deploy :
25
32
needs : package
@@ -30,16 +37,18 @@ jobs:
30
37
contents : write # For tag and release notes.
31
38
32
39
steps :
33
- - uses : actions/checkout@v3
40
+ - uses : actions/checkout@v4
34
41
35
42
- name : Download Package
36
- uses : actions/download-artifact@v3
43
+ uses : actions/download-artifact@v4
37
44
with :
38
45
name : Packages
39
46
path : dist
40
47
41
48
- name : Publish package to PyPI
42
-
49
+
50
+ with :
51
+ attestations : true
43
52
44
53
- name : Push tag
45
54
run : |
49
58
git push origin v${{ github.event.inputs.version }}
50
59
51
60
- name : GitHub Release
52
- uses : softprops/action-gh-release@v1
61
+ uses : softprops/action-gh-release@v2
53
62
with :
54
63
body_path : scripts/latest-release-notes.md
55
64
files : dist/*
Original file line number Diff line number Diff line change @@ -17,10 +17,13 @@ jobs:
17
17
18
18
package :
19
19
runs-on : ubuntu-latest
20
+ permissions :
21
+ id-token : write
22
+ attestations : write
20
23
steps :
21
- - uses : actions/checkout@v3
24
+ - uses : actions/checkout@v4
22
25
- name : Build and Check Package
23
- uses : hynek/build-and-inspect-python-package@v1.5
26
+ uses : hynek/build-and-inspect-python-package@v2.13.0
24
27
25
28
test :
26
29
@@ -35,16 +38,16 @@ jobs:
35
38
os : [ubuntu-latest, windows-latest]
36
39
37
40
steps :
38
- - uses : actions/checkout@v3
41
+ - uses : actions/checkout@v4
39
42
40
43
- name : Download Package
41
- uses : actions/download-artifact@v3
44
+ uses : actions/download-artifact@v4
42
45
with :
43
46
name : Packages
44
47
path : dist
45
48
46
49
- name : Set up Python
47
- uses : actions/setup-python@v4
50
+ uses : actions/setup-python@v5
48
51
with :
49
52
python-version : ${{ matrix.python }}
50
53
Original file line number Diff line number Diff line change 1
- exclude : ' ^($|.*\.bin)'
2
1
repos :
3
2
- repo : local
4
3
hooks :
You can’t perform that action at this time.
0 commit comments