pypa/gh-action-pypi-publish
### [`v1.6.4`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.4)
[Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.3...v1.6.4)
#### oh, boi! again?
This is the last one tonight, promise! It fixes this embarrassing bug that was actually caught by the CI but got overlooked due to the lack of sleep.
TL;DR GH passed `$HOME` from the external env into the container and that tricked the Python's `site` module to think that the home directory is elsewhere, adding non-existent paths to the env vars. See [#115](https://togithub.com/pypa/gh-action-pypi-publish/issues/115).
**Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.3...v1.6.4
### [`v1.6.3`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.3)
[Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.2...v1.6.3)
##### Another Release!? Why?
In [https://github.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013](https://togithub.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013), it was discovered that passing a `$PATH` variable even breaks the shebang. So this version adds more safeguards to make sure it keeps working with a fully broken `$PATH`.
**Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.2...v1.6.3
### [`v1.6.2`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.2)
[Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.1...v1.6.2)
#### What's Fixed
- Made the `$PATH` and `$PYTHONPATH` environment variables resilient to broken values passed from the host runner environment, which previously allowed the users to accidentally break the container's internal runtime as reported in [https://github.com/pypa/gh-action-pypi-publish/issues/112](https://togithub.com/pypa/gh-action-pypi-publish/issues/112)
#### Internal Maintenance Improvements
- Added a devpi-based smoke-test GitHub Actions CI/CD workflow by [@sesdaile-varmour](https://togithub.com/sesdaile-varmour) in [https://github.com/pypa/gh-action-pypi-publish/pull/111](https://togithub.com/pypa/gh-action-pypi-publish/pull/111)
#### New Contributors
- [@sesdaile-varmour](https://togithub.com/sesdaile-varmour) made their first contribution in [https://github.com/pypa/gh-action-pypi-publish/pull/111](https://togithub.com/pypa/gh-action-pypi-publish/pull/111)
**Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.1...v1.6.2
### [`v1.6.1`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.1)
[Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1)
#### What's happened?!
There was a sneaky bug in v1.6.0 which caused Twine to be outside the import path in the Python runtime. It is fixed in v1.6.1 by updating `$PYTHONPATH` to point to a correct location of the user-global `site-packages/` directory.
**Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1
### [`v1.6.0`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.0)
[Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0)
#### Anything's changed?
The only update is that the Python runtime has been upgraded from 3.9 to 3.11. There are no functional changes in this release.
**Full Changelog**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0
### [`v1.5.2`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.5.2)
[Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2)
#### What's Improved
- Implemented the Twine transitive dependency tree pinning using pip-tools-generated constraint files. See [https://github.com/pypa/gh-action-pypi-publish/issues/107](https://togithub.com/pypa/gh-action-pypi-publish/issues/107) and [https://github.com/pypa/gh-action-pypi-publish/issues/101](https://togithub.com/pypa/gh-action-pypi-publish/issues/101) for details.
**Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v1.5.1->v1.6.4Release Notes
pypa/gh-action-pypi-publish
### [`v1.6.4`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.4) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.3...v1.6.4) #### oh, boi! again? This is the last one tonight, promise! It fixes this embarrassing bug that was actually caught by the CI but got overlooked due to the lack of sleep. TL;DR GH passed `$HOME` from the external env into the container and that tricked the Python's `site` module to think that the home directory is elsewhere, adding non-existent paths to the env vars. See [#115](https://togithub.com/pypa/gh-action-pypi-publish/issues/115). **Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.3...v1.6.4 ### [`v1.6.3`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.3) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.2...v1.6.3) ##### Another Release!? Why? In [https://github.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013](https://togithub.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013), it was discovered that passing a `$PATH` variable even breaks the shebang. So this version adds more safeguards to make sure it keeps working with a fully broken `$PATH`. **Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.2...v1.6.3 ### [`v1.6.2`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.2) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.1...v1.6.2) #### What's Fixed - Made the `$PATH` and `$PYTHONPATH` environment variables resilient to broken values passed from the host runner environment, which previously allowed the users to accidentally break the container's internal runtime as reported in [https://github.com/pypa/gh-action-pypi-publish/issues/112](https://togithub.com/pypa/gh-action-pypi-publish/issues/112) #### Internal Maintenance Improvements - Added a devpi-based smoke-test GitHub Actions CI/CD workflow by [@sesdaile-varmour](https://togithub.com/sesdaile-varmour) in [https://github.com/pypa/gh-action-pypi-publish/pull/111](https://togithub.com/pypa/gh-action-pypi-publish/pull/111) #### New Contributors - [@sesdaile-varmour](https://togithub.com/sesdaile-varmour) made their first contribution in [https://github.com/pypa/gh-action-pypi-publish/pull/111](https://togithub.com/pypa/gh-action-pypi-publish/pull/111) **Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.1...v1.6.2 ### [`v1.6.1`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.1) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1) #### What's happened?! There was a sneaky bug in v1.6.0 which caused Twine to be outside the import path in the Python runtime. It is fixed in v1.6.1 by updating `$PYTHONPATH` to point to a correct location of the user-global `site-packages/` directory. **Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1 ### [`v1.6.0`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.0) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0) #### Anything's changed? The only update is that the Python runtime has been upgraded from 3.9 to 3.11. There are no functional changes in this release. **Full Changelog**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0 ### [`v1.5.2`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.5.2) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2) #### What's Improved - Implemented the Twine transitive dependency tree pinning using pip-tools-generated constraint files. See [https://github.com/pypa/gh-action-pypi-publish/issues/107](https://togithub.com/pypa/gh-action-pypi-publish/issues/107) and [https://github.com/pypa/gh-action-pypi-publish/issues/101](https://togithub.com/pypa/gh-action-pypi-publish/issues/101) for details. **Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.