From 01859d2a5cb73c52d44ba147ce0024858af3d300 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 May 2024 03:38:34 +0000 Subject: [PATCH] gh-actions(deps): bump hynek/build-and-inspect-python-package Bumps the gh-actions-dependencies group with 1 update: [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package). Updates `hynek/build-and-inspect-python-package` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases) - [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md) - [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.5.0...v2.6.0) --- updated-dependencies: - dependency-name: hynek/build-and-inspect-python-package dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/package-build.yml | 2 +- .github/workflows/package-release.yml | 2 +- .github/workflows/package-testpypi.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/package-build.yml b/.github/workflows/package-build.yml index 315d752c..2ab8a818 100644 --- a/.github/workflows/package-build.yml +++ b/.github/workflows/package-build.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 - - uses: hynek/build-and-inspect-python-package@v2.5.0 + - uses: hynek/build-and-inspect-python-package@v2.6.0 id: build-pkg with: attest-build-provenance-github: ${{ !(github.event.pull_request.head.repo.fork || github.event.workflow_call.pull_request.head.repo.fork) && github.actor != 'dependabot[bot]' }} diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml index bdf30496..2ac6dc60 100644 --- a/.github/workflows/package-release.yml +++ b/.github/workflows/package-release.yml @@ -109,7 +109,7 @@ jobs: ref: main # Make sure to check out the latest commit on main, not the original commit that triggered the workflow fetch-depth: 0 - name: Build package - uses: hynek/build-and-inspect-python-package@v2.5.0 + uses: hynek/build-and-inspect-python-package@v2.6.0 with: attest-build-provenance-github: 'true' upload-testpypi: diff --git a/.github/workflows/package-testpypi.yml b/.github/workflows/package-testpypi.yml index 4c864288..18bdeee6 100644 --- a/.github/workflows/package-testpypi.yml +++ b/.github/workflows/package-testpypi.yml @@ -54,7 +54,7 @@ jobs: python scripts/project_version.py --set-version=$NEW_VERSION echo "NEW_VERSION=$NEW_VERSION" >> $GITHUB_OUTPUT - name: Build package - uses: hynek/build-and-inspect-python-package@v2.5.0 + uses: hynek/build-and-inspect-python-package@v2.6.0 with: attest-build-provenance-github: 'true' outputs: