Bump actions/attest-build-provenance from 1.4.1 to 1.4.2 in the actions group #10

	name: CI

	on:
	workflow_dispatch:
	pull_request:
	push:
	branches:
	- main

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	env:
	# Many color libraries just need this to be set to any value, but at least
	# one distinguishes color depth, where "3" -> "256-bit color".
	FORCE_COLOR: 3

	jobs:
	pre-commit:
	name: Format
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-python@v5
	with:
	python-version: "3.x"
	- uses: pre-commit/[email protected]
	with:
	extra_args: --hook-stage manual --all-files
	- name: Run PyLint
	run: pipx run nox -s pylint -- --output-format=github

	checks:
	name: Check Python ${{ matrix.python-version }} on ${{ matrix.runs-on }}
	runs-on: ${{ matrix.runs-on }}
	needs: [pre-commit]
	strategy:
	fail-fast: false
	matrix:
	python-version: ["3.8", "3.13"]
	runs-on: [ubuntu-latest, windows-latest, macos-14]

	include:
	- python-version: "pypy-3.10"
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	allow-prereleases: true

	- name: Install package
	run: python -m pip install .[test]

	- name: Test package
	run: >-
	python -m pytest -ra --cov --cov-report=xml --cov-report=term
	--durations=20

	- name: Upload coverage report
	uses: codecov/[email protected]
	with:
	token: ${{ secrets.CODECOV_TOKEN }}

Provide feedback