diff --git a/.github/workflows/package-build.yml b/.github/workflows/package-build.yml index 315d752c..2ab8a818 100644 --- a/.github/workflows/package-build.yml +++ b/.github/workflows/package-build.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 - - uses: hynek/build-and-inspect-python-package@v2.5.0 + - uses: hynek/build-and-inspect-python-package@v2.6.0 id: build-pkg with: attest-build-provenance-github: ${{ !(github.event.pull_request.head.repo.fork || github.event.workflow_call.pull_request.head.repo.fork) && github.actor != 'dependabot[bot]' }} diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml index bdf30496..2ac6dc60 100644 --- a/.github/workflows/package-release.yml +++ b/.github/workflows/package-release.yml @@ -109,7 +109,7 @@ jobs: ref: main # Make sure to check out the latest commit on main, not the original commit that triggered the workflow fetch-depth: 0 - name: Build package - uses: hynek/build-and-inspect-python-package@v2.5.0 + uses: hynek/build-and-inspect-python-package@v2.6.0 with: attest-build-provenance-github: 'true' upload-testpypi: diff --git a/.github/workflows/package-testpypi.yml b/.github/workflows/package-testpypi.yml index 4c864288..18bdeee6 100644 --- a/.github/workflows/package-testpypi.yml +++ b/.github/workflows/package-testpypi.yml @@ -54,7 +54,7 @@ jobs: python scripts/project_version.py --set-version=$NEW_VERSION echo "NEW_VERSION=$NEW_VERSION" >> $GITHUB_OUTPUT - name: Build package - uses: hynek/build-and-inspect-python-package@v2.5.0 + uses: hynek/build-and-inspect-python-package@v2.6.0 with: attest-build-provenance-github: 'true' outputs: