search

pytest-dev / pytest-asyncio

Asyncio support for pytest
https://pytest-asyncio.readthedocs.io
Apache License 2.0
1.43k stars 152 forks source link

Build(deps): Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.1 #931

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps pypa/gh-action-pypi-publish from 1.9.0 to 1.10.1.

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.10.0

🔏 Anything fancy, eh?

This time, @​woodruffw💰 implemented support for PEP 740 attestations functionality in #236 and #245. This is a big deal, as it is a huge step forward to replacing what the deprecated GPG signatures used to provide in a more meaningful way.

🙏 Please, thank William for working on this amazing improvement for the ecosystem! The overall effort is tracked @ pypi/warehouse#15871, by the way.

🪞 Full Diff: https://github.com/pypa/gh-action-pypi-publish/compare/v1.9.0...v1.10.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

Commits
  • 8a08d61 Expose PEP 740 attestations functionality
  • fb9fc6a Merge pull request #245 from trail-of-forks/ww/bump-twine
  • 4d020ff requirements: re-compile requirements with latest twine
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
webknjaz commented 2 months ago

@seifertm does this need a force-merge?

dependabot[bot] commented 2 months ago

A newer version of pypa/gh-action-pypi-publish exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

webknjaz commented 2 months ago

@seifertm would you mind force-merging?

seifertm commented 2 months ago

Sorry, I'm currently afk and I haven't set up GitHub on my mobile phone.

Maybe there's someone else from pytest-dev who has permission merge this?

Am 6. September 2024 00:22:30 GMT+09:00 schrieb "Sviatoslav Sydorenko (Святослав Сидоренко)" @.***>:

@seifertm would you mind force-merging?

-- Reply to this email directly or view it on GitHub: https://github.com/pytest-dev/pytest-asyncio/pull/931#issuecomment-2331999582 You are receiving this because you were mentioned.

Message ID: @.***> -- Sent from a mobile device. Please excuse my brevity.

seifertm commented 2 months ago

Thanks @webknjaz and @Pierre-Sassoulas !