mcaulifn / solcast

Apache License 2.0
7 stars 2 forks source link

chore(deps): update pypa/gh-action-pypi-publish action to v1.10.1 #314

Open renovate[bot] opened 2 weeks ago

renovate[bot] commented 2 weeks ago

This PR contains the following updates:

Package Type Update Change
pypa/gh-action-pypi-publish action patch v1.10.0 -> v1.10.1

Release Notes

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish) ### [`v1.10.1`](https://redirect.github.com/pypa/gh-action-pypi-publish/releases/tag/v1.10.1) [Compare Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.10.0...v1.10.1) #### πŸš‘πŸ” Oopsie... We missed a tiny bug in the attestations feature the other day The problem was that the distribution file validity check was failing on any valid distribution being present and ready to be signed. What a silly mistake! It's now been fixed via https://github.com/pypa/gh-action-pypi-publish/commit/0ab0b79, though. So everything's good! \-- [@​webknjaz](https://redirect.github.com/webknjaz)[πŸ’°](https://redirect.github.com/sponsors/webknjaz) > \[!IMPORTANT] > ✨ Despite this minor hiccup, we invite you to still opt into trying this feature out early. [It can be enabled](https://redirect.github.com/marketplace/actions/pypi-publish#generating-and-uploading-attestations) like this: > > ```yml > with: > attestations: true > ``` > > Leave feedback in [the v1.10.0 release discussion](https://redirect.github.com/pypa/gh-action-pypi-publish/discussions/255) or [the PR](https://redirect.github.com/pypa/gh-action-pypi-publish/pull/236). **πŸͺž Full Diff**: https://github.com/pypa/gh-action-pypi-publish/compare/v1.10.0...v1.10.1 **πŸ§”β€β™‚οΈ Release Manager:** [@​webknjaz πŸ‡ΊπŸ‡¦](https://redirect.github.com/sponsors/webknjaz) **πŸ™ Special Thanks** to [@​hugovk](https://redirect.github.com/hugovk)[πŸ’°](https://redirect.github.com/sponsors/hugovk) for [promptly validating the bug fix](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/256#issuecomment-2325925847), mere minutes after I pushed it β€” I even haven't finished writing this text by then!

Configuration

πŸ“… Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

β™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

πŸ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

github-actions[bot] commented 2 weeks ago

Dependency Review

βœ… No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/pypa/gh-action-pypi-publish 0ab0b79471669eb3a4d647e625009c62f9f3b241 :green_circle: 5.1
Details
CheckScoreReason
Code-Review:green_circle: 3Found 6/19 approved changesets -- score normalized to 3
Maintained:green_circle: 74 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 7
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Security-Policy:green_circle: 4security policy file detected
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts:green_circle: 10no binaries found in the repo
Signed-Releases:warning: -1no releases found
Fuzzing:warning: 0project is not fuzzed
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Branch-Protection:warning: -1internal error: error during GetBranch(master): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
actions/pypa/gh-action-pypi-publish 0ab0b79471669eb3a4d647e625009c62f9f3b241 :green_circle: 5.1
Details
CheckScoreReason
Code-Review:green_circle: 3Found 6/19 approved changesets -- score normalized to 3
Maintained:green_circle: 74 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 7
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Security-Policy:green_circle: 4security policy file detected
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts:green_circle: 10no binaries found in the repo
Signed-Releases:warning: -1no releases found
Fuzzing:warning: 0project is not fuzzed
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Branch-Protection:warning: -1internal error: error during GetBranch(master): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0

Scanned Manifest Files

.github/workflows/publish.yaml
  • pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241
  • pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6
.github/workflows/pullrequest.yaml
  • pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241
  • pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6
codecov[bot] commented 2 weeks ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%. Comparing base (81657bd) to head (07985cb). Report is 151 commits behind head on main.

Additional details and impacted files [![Impacted file tree graph](https://app.codecov.io/gh/mcaulifn/solcast/pull/314/graphs/tree.svg?width=650&height=150&src=pr&token=04NTIH61T2&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe)](https://app.codecov.io/gh/mcaulifn/solcast/pull/314?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) ```diff @@ Coverage Diff @@ ## main #314 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 7 7 Lines 126 126 ========================================= Hits 126 126 ``` | [Flag](https://app.codecov.io/gh/mcaulifn/solcast/pull/314/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) | Coverage Ξ” | | |---|---|---| | [unittests](https://app.codecov.io/gh/mcaulifn/solcast/pull/314/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) | `100.00% <ΓΈ> (ΓΈ)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe#carryforward-flags-in-the-pull-request-comment) to find out more. ------ [Continue to review full report in Codecov by Sentry](https://app.codecov.io/gh/mcaulifn/solcast/pull/314?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). > **Legend** - [Click here to learn more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) > `Ξ” = absolute (impact)`, `ΓΈ = not affected`, `? = missing data` > Powered by [Codecov](https://app.codecov.io/gh/mcaulifn/solcast/pull/314?dropdown=coverage&src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). Last update [9c5c96f...07985cb](https://app.codecov.io/gh/mcaulifn/solcast/pull/314?dropdown=coverage&src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). Read the [comment docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe).
codeclimate[bot] commented 2 weeks ago

Code Climate has analyzed commit 07985cbc and detected 0 issues on this pull request.

View more on Code Climate.