pypa / gh-action-pypi-publish

The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI: https://github.com/marketplace/actions/pypi-publish
https://packaging.python.org/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/
BSD 3-Clause "New" or "Revised" License
895 stars 85 forks source link

"Attestation generation failure: The following paths look like distributions but are not actually files" #256

Closed hugovk closed 2 weeks ago

hugovk commented 2 weeks ago

I added attestations: true to my deploy workflow:

      - name: Upload package to Test PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          attestations: true
          repository-url: https://test.pypi.org/legacy/

But it failed:

Checking dist/tinytext-3.8.1.dev14-py3-none-any.whl: PASSED
Checking dist/tinytext-3.8.1.dev14.tar.gz: PASSED
Notice: Generating and uploading digital attestations
Error: Attestation generation failure: The following paths look like distributions but are not actually files: /github/workspace/dist/tinytext-3.8.1.dev14.tar.gz, /github/workspace/dist/tinytext-3.8.1.dev14-py3-none-any.whl

What am I missing?

webknjaz commented 2 weeks ago

Hynek also hit this in attrs so I'm pretty sure we messed up and it's a bug..

cc @woodruffw

hugovk commented 2 weeks ago

Thanks! It worked now:

https://github.com/hugovk/tinytext/actions/runs/10662143946/job/29598679417#step:2:144

webknjaz commented 2 weeks ago

Wonderful! Thanks for checking! I've cut v1.10.1 and I'm filling out the release notes as we speak.