Merge branch 'mainline' into jericht/endpoint_url

.github/workflows/release_publish.yml

@@ -16,6 +16,32 @@ jobs:
     name: Publish Release
     permissions:
       id-token: write
-      contents: read
+      contents: write
     uses: aws-deadline/.github/.github/workflows/reusable_publish.yml@mainline
     secrets: inherit
+  # PyPI does not support reusable workflows yet
+  # # See https://github.com/pypi/warehouse/issues/11096
+  PublishToPyPI:
+    needs: Publish
+    runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: release
+          fetch-depth: 0
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.9'
+      - name: Install dependencies
+        run: |
+          pip install --upgrade hatch
+      - name: Build
+        run: hatch -v build
+      # # See https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-pypi
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

requirements-release.txt

@@ -1 +1 @@
-python-semantic-release == 9.5.*
+python-semantic-release == 9.8.*

requirements-testing.txt

@@ -1,10 +1,10 @@
 coverage[toml] == 7.*
-pytest == 8.1.*
+pytest == 8.2.*
 pytest-cov == 5.0.*
 pytest-timeout == 2.3.*
-pytest-xdist == 3.5.*
+pytest-xdist == 3.6.*
 black == 24.4.*
 moto[cloudformation,s3] == 4.2.*
-mypy == 1.9.*
+mypy == 1.10.*
 ruff == 0.4.*
-twine == 5.0.*
+twine == 5.1.*