Bruno Oliveira
7ca1bc9040
Enable thanks.dev in FUNDING.yml
2025-04-01 08:36:41 -03:00
Bruno Oliveira
9eacaef044
Enable GitHub Sponsors in FUNDING.yml
2025-04-01 08:33:12 -03:00
Bruno Oliveira
ec87085035
Merge pull request #13263 from pytest-dev/fix-prepare-release
...
Fix prepare-release-pr script
2025-03-13 11:03:27 -03:00
dependabot[bot]
03b5a79170
build(deps): Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 ( #13283 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.7 to 7.0.8.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](dd2324fc52...271a8d0340
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 07:14:46 +01:00
dependabot[bot]
bfe0c83ed3
build(deps): Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 ( #13268 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.6 to 7.0.7.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](67ccf781d6...dd2324fc52
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-03 15:40:29 +01:00
Bruno Oliveira
79f0733f09
Fix prepare-release-pr script
...
The script is [currently failing with](https://github.com/pytest-dev/pytest/actions/runs/13615071695/job/38057071681 ):
```
remote: Support for password authentication was removed on August 13, 2021.
remote: Please see https://docs.github.com/get-started/getting-started-with-git/about-remote-repositories#cloning-with-https-urls for information on currently recommended modes of authentication.
fatal: Authentication failed for 'https://github.com/pytest-dev/pytest.git/ '
```
Decided to remove the usage of `github3` and use the `gh` command-line tool directly, which simplifies the script, integrates nicely with GH, and enables to run it locally seamlessly.
2025-03-02 09:44:01 -03:00
dependabot[bot]
991db2e1b1
build(deps): Bump hynek/build-and-inspect-python-package ( #13166 )
...
Bumps [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ) from 2.11.0 to 2.12.0.
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.11.0...v2.12.0 )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-27 07:59:11 -03:00
dependabot[bot]
fb7f0440c4
build(deps): Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 ( #13165 )
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.12.3 to 1.12.4.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.12.3...v1.12.4 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-27 07:58:30 -03:00
dependabot[bot]
1ba36bc940
build(deps): Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 ( #13147 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.5 to 7.0.6.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](5e914681df...67ccf781d6
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-20 12:24:50 -03:00
Thomas Grainger
868e1d225e
apply warnings filter as soon as possible, and remove it as late as possible ( #13057 )
...
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
2024-12-18 11:09:33 +00:00
Ran Benita
ee8f98d2f9
ci: harden github actions according to "zizmor" recommendations ( #13062 )
...
Fix all issues reported by zizmor 0.9.2 running locally.
See: https://woodruffw.github.io/zizmor/
2024-12-16 06:48:05 +01:00
🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко)
491cb6274a
Merge pull request #13063 from pytest-dev/dependabot/github_actions/hynek/build-and-inspect-python-package-2.11.0
...
build(deps): Bump hynek/build-and-inspect-python-package from 2.10.0 to 2.11.0
2024-12-16 06:02:59 +01:00
dependabot[bot]
4da57defe0
build(deps): Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.12.2 to 1.12.3.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.12.2...v1.12.3 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-16 03:36:21 +00:00
dependabot[bot]
1d4f730965
build(deps): Bump hynek/build-and-inspect-python-package
...
Bumps [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ) from 2.10.0 to 2.11.0.
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.10.0...v2.11.0 )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-16 03:36:19 +00:00
Pierre Sassoulas
a4cb74e864
Upgrade doc and CI after dropping python 3.8
2024-11-25 20:11:18 +01:00
dependabot[bot]
fe60ceb06d
build(deps): Bump codecov/codecov-action from 4 to 5 ( #12972 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-18 09:39:04 -03:00
dependabot[bot]
ea0fa63944
build(deps): Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.12.2 ( #12953 )
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.10.3 to 1.12.2.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.10.3...v1.12.2 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-11 08:39:14 +01:00
dependabot[bot]
3ef3c2d834
build(deps): Bump hynek/build-and-inspect-python-package ( #12936 )
...
Bumps [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ) from 2.9.0 to 2.10.0.
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.9.0...v2.10.0 )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-04 06:15:25 +01:00
Florian Bruhin
f92597c664
Fix pdb selftests on Python 3.13
...
Python 3.13 makes pdb break on the breakpoint() call,
rather than on the next line:
https://docs.python.org/3/whatsnew/3.13.html#pdb
Also runs the pdb tests on Python 3.13 in CI.
See #12884 for a more proper solution for that.
Fixes #12497
2024-10-13 17:38:39 +02:00
dependabot[bot]
b451a18cc9
build(deps): Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.10.3 ( #12858 )
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.10.2 to 1.10.3.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.10.2...v1.10.3 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-07 09:34:41 -03:00
dependabot[bot]
245e442039
build(deps): Bump peter-evans/create-pull-request from 7.0.2 to 7.0.5 ( #12833 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.2 to 7.0.5.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](d121e62763...5e914681df
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-23 09:08:30 -03:00
dependabot[bot]
25401d0b1d
build(deps): Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 ( #12832 )
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.10.1 to 1.10.2.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.10.1...v1.10.2 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-23 09:07:54 -03:00
dependabot[bot]
e7e3f50677
build(deps): Bump peter-evans/create-pull-request from 7.0.1 to 7.0.2 ( #12821 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](8867c4aba1...d121e62763
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-16 08:01:42 +00:00
dependabot[bot]
c22b012ba8
build(deps): Bump hynek/build-and-inspect-python-package ( #12822 )
...
Bumps [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ) from 2.8.0 to 2.9.0.
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.8.0...v2.9.0 )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-16 09:43:57 +02:00
dependabot[bot]
7316b42df2
build(deps): Bump peter-evans/create-pull-request from 6.1.0 to 7.0.1 ( #12791 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 6.1.0 to 7.0.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](c5a7806660...8867c4aba1
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 09:05:39 -03:00
dependabot[bot]
63a5e11514
build(deps): Bump pypa/gh-action-pypi-publish from 1.10.0 to 1.10.1 ( #12790 )
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.10.0 to 1.10.1.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.10.0...v1.10.1 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 09:04:10 -03:00
Sviatoslav Sydorenko (Святослав Сидоренко)
f8d3e4102f
Opt into uploading PEP 740 digital publish attestations to PyPI
2024-09-03 00:13:38 +02:00
dependabot[bot]
4f60c781be
build(deps): Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.0
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.9.0...v1.10.0 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-02 03:53:52 +00:00
dependabot[bot]
3594adc066
build(deps): Bump hynek/build-and-inspect-python-package ( #12666 )
...
Bumps [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.7.0...v2.8.0 )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-29 05:52:48 +02:00
dependabot[bot]
1590cfb7a5
build(deps): Bump hynek/build-and-inspect-python-package ( #12643 )
...
Bumps [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.6.0...v2.7.0 )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 09:34:06 -03:00
SOUBHIK KUMAR MITRA
9eee45a747
Bump PyPy runtime to v3.9 @ GHA
...
PyPy 3.8 has a flaky bug in the garbage collector that is not going to
be fixed there since that version is EoL, but newer versions have it
addressed.
The problem manifests itself in CI as follows:
```console
TypeError: expected some sort of stmt, but got <_ast.Load object ...>
```
This patch makes use of the PyPy version that is still supported
and contains a fix for the said bug.
Ref: https://www.pypy.org/posts/2024/03/fixing-bug-incremental-gc.html
Resolves #11771 .
2024-07-19 18:06:19 +05:30
Sviatoslav Sydorenko (Святослав Сидоренко)
de4e3cffc2
Revert " 🚑 🧪 Set the Codecov token directly in GHA"
2024-07-01 16:47:47 +02:00
dependabot[bot]
d582dcfc16
build(deps): Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 ( #12527 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 6.0.5 to 6.1.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](6d6857d369...c5a7806660
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-24 18:21:02 -03:00
Sviatoslav Sydorenko (Святослав Сидоренко)
f75e3fe63f
Merge pull request #12516 from webknjaz/maintenance/hotfix/gha-codecov-token
2024-06-22 12:32:18 +02:00
Sviatoslav Sydorenko
c716e0baef
🧪 Bump the `alls-green` action to 223erbb7
...
This version drops the use of the outdated GHA syntax for setting
action output values.
2024-06-21 23:06:26 +02:00
Sviatoslav Sydorenko
1b85ac126e
🚑 🧪 Set the Codecov token directly in GHA
...
It's necessary since it seems that the currently used Codecov uploader
doesn't read the token from config sometimes.
This is a follow-up for #12508 which wasn't enough.
2024-06-21 22:52:17 +02:00
Sviatoslav Sydorenko (Святослав Сидоренко)
9947ec3ad1
🧪 🚑 Pass a Codecov config to the action @ GHA ( #12508 )
...
The #11921 update broke uploading coverage of the `main` branch (or
any in-repo pushes for that matter) to Codecov 4 months ago.
Version 4 requires an upload token to be provided and since there was
no configuration for it, the upload was failing. But the step itself
was showing up as successful due to `fail_ci_if_error: true` being
set. The error is visible in the console output, though.
This patch flips the setting to `fail_ci_if_error: false` and sets the
Codecov upload token in the config in clear text. The non-secret part
allows the PRs uploads to be more stable.
Co-authored-by: Ronny Pfannschmidt <opensource@ronnypfannschmidt.de>
2024-06-21 17:47:23 +02:00
Sviatoslav Sydorenko
323b0bd853
🧪 Make a draft based plugin bump PR CI trigger
...
Normally, PRs/commits published using the default GitHub Actions CI/CD
API token are not propagated to any integrations. This patch marks the
plugin update PR as a draft and leaves a comment asking the maintainers to
mark it as ready for review in order to actually trigger a CI run.
This idea is found in GitHub's own repos:
* https://github.com/github/codeql-action/pull/2263#issuecomment-2078311173
* https://github.com/github/codeql-action/blob/4ebadbc7/.github/workflows/update-dependencies.yml#L38-L41
* https://github.com/github/codeql-action/pull/1868
* https://github.com/github/codeql-action/pull/679
2024-06-21 14:11:06 +02:00
Ronny Pfannschmidt
57bc6df510
Merge pull request #12488 from webknjaz/maintenance/gha-check-allowed-failures
...
🧪 Make required CI jobs match branch protection
2024-06-19 12:42:36 +02:00
Sviatoslav Sydorenko
6a95bcaa58
🧪 Make required CI jobs match branch protection
2024-06-19 12:10:20 +02:00
Sviatoslav Sydorenko
19715bf313
🔥 Exterminate legacy `backport` GHA workflow
...
Previously, this workflow was being used to cherry-pick PRs made
against `main` into older stable branches. Now that #12475 integrated
the Patchback GitHub App, it's no longer needed as it's making
duplicate pull requests which don't even trigger CI runs automatically
due to #10354 . So this patch removes said workflow to address the
problem.
2024-06-19 11:22:55 +02:00
Ronny Pfannschmidt
c46a3a9920
Merge pull request #12477 from webknjaz/maintenance/chronographer-config
...
💅 Add a config for the Chronographer GitHub App
2024-06-19 09:49:11 +02:00
Sviatoslav Sydorenko (Святослав Сидоренко)
d7b4010638
💅 Add a config for the Patchback GitHub App ( #12475 )
...
This patch prepares the project's backporting process to start being
handled by the Patchback GitHub App [[1]].
Ref #9384
Resolves #9385
Resolves #9553
Resolves #9554
Resolves #9555
[1]: https://github.com/apps/patchback
2024-06-19 00:41:33 +00:00
Sviatoslav Sydorenko
f479afc5c0
💅 Add a config for the Chronographer GitHub App
...
This app allows requiring changelog fragments to be included with
each pull request.
2024-06-19 00:40:11 +02:00
Ronny Pfannschmidt
dc65bb6a66
Merge pull request #10315 from webknjaz/maintenance/gha-check
...
Introduce a gate/check GHA job
2024-06-18 16:30:54 +02:00
dependabot[bot]
80b7657b2a
build(deps): Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 ( #12464 )
...
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) from 1.8.14 to 1.9.0.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.14...v1.9.0 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-17 09:58:23 +02:00
dependabot[bot]
383659d0be
build(deps): Bump hynek/build-and-inspect-python-package ( #12373 )
...
Bumps [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/v2.5.0...v2.6.0 )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-29 13:39:29 +02:00
Ran Benita
1cb704ff2c
Add Python 3.13 (beta1) support
2024-05-19 09:25:13 +03:00
Bruno Oliveira
635fbe2bff
Attest package provenance ( #12333 )
...
Use the new build provenance support added in [build-and-inspect-python-package 2.5.0](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md#250---2024-05-13 ).
More information: https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
Tested also in https://github.com/pytest-dev/pytest-mock/pull/431 .
Note: even though it is technically necessary only for the `deploy` workflow, as the `test` workflow does not publish its packages, decided to always attest the provenance in both cases to avoid any surprises related to this (say a misconfiguration) when deploying.
2024-05-17 08:19:13 -03:00
dependabot[bot]
cf90008a1a
build(deps): Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 ( #12268 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 6.0.4 to 6.0.5.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](9153d834b6...6d6857d369
)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-29 08:38:05 -03:00