Skip to content

CI: Update pypa/gh-action-pypi-publish to v1.12.4 for attestations on PyPI#7793

Merged
stefanv merged 1 commit intoscikit-image:mainfrom
matthewfeickert:ci/update-trusted-publisher
May 15, 2025
Merged

CI: Update pypa/gh-action-pypi-publish to v1.12.4 for attestations on PyPI#7793
stefanv merged 1 commit intoscikit-image:mainfrom
matthewfeickert:ci/update-trusted-publisher

Conversation

@matthewfeickert
Copy link
Contributor

@matthewfeickert matthewfeickert commented May 13, 2025

Description

Update to pypa/gh-action-pypi-publish v1.12.4 (pypa/gh-action-pypi-publish@76f52bc).

As of pypa/gh-action-pypi-publish v1.11.0 using Trusted Publishers will produce and publish attestations by default which are visible on PyPI through inspection and through APIs.

Big thanks to @mihaimaruseac for pointing this out!

This hasn't been automatically picked up yet as Dependabot isn't active for GitHub Actions in scikit-image.

Amends and follows up on:

Checklist

Release note

For maintainers and optionally contributors, please refer to the instructions on how to document this PR for the release notes.

...

I'm assuming this isn't needed for this, but let me know otherwise.

@matthewfeickert matthewfeickert marked this pull request as ready for review May 13, 2025 18:55
@matthewfeickert
Copy link
Contributor Author

@stefanv @lagru this is ready for review.

@lagru lagru added the 🤖 type: Infrastructure CI, packaging, tools and automation label May 15, 2025
Copy link
Member

@lagru lagru left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lagru lagru added the 🚀 Quick win Trivial, small, easy to address or review label May 15, 2025
@stefanv stefanv merged commit c22fca7 into scikit-image:main May 15, 2025
27 of 28 checks passed
@stefanv stefanv added this to the 0.26 milestone May 15, 2025
@stefanv
Copy link
Member

stefanv commented May 15, 2025

Thanks, @matthewfeickert and @mihaimaruseac!

@matthewfeickert matthewfeickert deleted the ci/update-trusted-publisher branch May 15, 2025 17:04
matthew-brett added a commit to matthew-brett/scikit-image that referenced this pull request Jul 7, 2025
* origin/main:
  Deprecate estimate method in favor of class constructor (scikit-image#7771)
  Temporary fix for Visual Studio & Clang incompatibility in Windows image (scikit-image#7835)
  Address deprecations in Pillow 11.3 (scikit-image#7828)
  Remove unused & obsolete `legacy_datasets`, `legacy_registry` vars (scikit-image#7677)
  Draft migration guide for skimage2 (scikit-image#7785)
  Do not report failure in wheels sub-recipe (scikit-image#7806)
  Use consistent wording in property description. (scikit-image#7804)
  Add intensity_median to regionprops (scikit-image#7745)
  CI: Update pypa/gh-action-pypi-publish to v1.12.4 for attestations on PyPI (scikit-image#7793)
  Document output dtype for transform.resize. (scikit-image#7792)
  Use `cibuildwheel` to build WASM/Pyodide wheels for `scikit-image`, push nightlies to Anaconda.org (scikit-image#7440)
  DOC: Include missing gain parameter in adjust_gamma equation (scikit-image#7763)
  Temporarily pin to `pyodide-build==0.30.0`, and ensure that the correct xbuildenvs are used (scikit-image#7788)
  Deprecate old names & attributes in RegionProperties (scikit-image#7778)
  Pin JasonEtco/create-an-issue action to SHA for v2.9.2 (scikit-image#7787)
  Make doctest-plus work with spin (scikit-image#7786)
  Report failures on main via issue (scikit-image#7752)
  Use `workers` instead of alternate parameter names (scikit-image#7302)
  Fix f-string in otsu plot (scikit-image#7780)
  Further document use of regionprops function and fix terms. (scikit-image#7518)
matthew-brett added a commit to matthew-brett/scikit-image that referenced this pull request Jul 14, 2025
* origin/main: (31 commits)
  Update import convention in certain gallery examples (scikit-image#7764)
  Refactor fundamental matrix scaling (scikit-image#7767)
  Add unit test for cval unequal to zero
  Forward  in _generic_edge_filter
  Remove superfluous mask argument from _generic_edge_filter
  Only report failure on main branch once
  Deprecate estimate method in favor of class constructor (scikit-image#7771)
  Temporary fix for Visual Studio & Clang incompatibility in Windows image (scikit-image#7835)
  Address deprecations in Pillow 11.3 (scikit-image#7828)
  Remove unused & obsolete `legacy_datasets`, `legacy_registry` vars (scikit-image#7677)
  Draft migration guide for skimage2 (scikit-image#7785)
  Do not report failure in wheels sub-recipe (scikit-image#7806)
  Use consistent wording in property description. (scikit-image#7804)
  Add intensity_median to regionprops (scikit-image#7745)
  CI: Update pypa/gh-action-pypi-publish to v1.12.4 for attestations on PyPI (scikit-image#7793)
  Document output dtype for transform.resize. (scikit-image#7792)
  Use `cibuildwheel` to build WASM/Pyodide wheels for `scikit-image`, push nightlies to Anaconda.org (scikit-image#7440)
  DOC: Include missing gain parameter in adjust_gamma equation (scikit-image#7763)
  Temporarily pin to `pyodide-build==0.30.0`, and ensure that the correct xbuildenvs are used (scikit-image#7788)
  Deprecate old names & attributes in RegionProperties (scikit-image#7778)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🤖 type: Infrastructure CI, packaging, tools and automation 🚀 Quick win Trivial, small, easy to address or review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants