Skip to content

Enable PEP 740 attestations when publishing to PyPI#21735

Merged
woodruffw merged 1 commit intomainfrom
ww/pep740
Dec 1, 2025
Merged

Enable PEP 740 attestations when publishing to PyPI#21735
woodruffw merged 1 commit intomainfrom
ww/pep740

Conversation

@woodruffw
Copy link
Member

Summary

This uses our own astral-sh/attest-action to add PEP 740 attestations to our PyPI releases.

See astral-sh/uv#16910 for the equivalent uv CI change 🙂

Test Plan

Not easy to test unfortunately, since this is squarely in the release flow. I've separately tested this action and have successfully integrated it on some other projects.

Signed-off-by: William Woodruff <william@astral.sh>
@woodruffw woodruffw self-assigned this Dec 1, 2025
@woodruffw woodruffw added release Related to the release process ci Related to internal CI tooling labels Dec 1, 2025
@woodruffw woodruffw merged commit 53299cb into main Dec 1, 2025
38 checks passed
@woodruffw woodruffw deleted the ww/pep740 branch December 1, 2025 18:15
dcreager added a commit that referenced this pull request Dec 2, 2025
* origin/main: (67 commits)
  Move `Token`, `TokenKind` and `Tokens` to `ruff-python-ast` (#21760)
  [ty] Don't confuse multiple occurrences of `typing.Self` when binding bound methods (#21754)
  Use our org-wide Renovate preset (#21759)
  Delete `my-script.py` (#21751)
  [ty] Move `all_members`, and related types/routines, out of `ide_support.rs` (#21695)
  [ty] Fix find-references for import aliases (#21736)
  [ty] add tests for workspaces (#21741)
  [ty] Stop testing the (brittle) constraint set display implementation (#21743)
  [ty] Use generator over list comprehension to avoid cast (#21748)
  [ty] Add a diagnostic for prohibited `NamedTuple` attribute overrides (#21717)
  [ty] Fix subtyping with `type[T]` and unions (#21740)
  Use `npm ci --ignore-scripts` everywhere (#21742)
  [`flake8-simplify`] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (`SIM222`, `SIM223`) (#21479)
  [`flake8-use-pathlib`] Mark fixes unsafe for return type changes (`PTH104`, `PTH105`, `PTH109`, `PTH115`) (#21440)
  [ty] Fix auto-import code action to handle pre-existing import
  Enable PEP 740 attestations when publishing to PyPI (#21735)
  [ty] Fix find references for type defined in stub (#21732)
  Use OIDC instead of codspeed token (#21719)
  [ty] Exclude `typing_extensions` from completions unless it's really available
  [ty] Fix false positives for `class F(Generic[*Ts]): ...` (#21723)
  ...
woodruffw added a commit that referenced this pull request Dec 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci Related to internal CI tooling release Related to the release process

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants