From 18a36528ea3c9d35f2417672891ba4d2b1adbcd7 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Tue, 2 Dec 2025 19:50:20 -0500 Subject: [PATCH] Disable PEP 740 attestations for PyPI publishing (#16944) ## Summary This broke the release and I haven't figured out why yet. ## Test Plan Blame my past self. Signed-off-by: William Woodruff --- .github/workflows/publish-pypi.yml | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml index 1ee2b563f..451df9bf9 100644 --- a/.github/workflows/publish-pypi.yml +++ b/.github/workflows/publish-pypi.yml @@ -18,7 +18,7 @@ jobs: environment: name: release permissions: - id-token: write # For PyPI's trusted publishing + PEP 740 attestations + id-token: write # For PyPI's trusted publishing steps: - name: "Install uv" uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0 @@ -27,9 +27,6 @@ jobs: pattern: wheels_uv-* path: wheels_uv merge-multiple: true - - uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4 - with: - paths: wheels_uv/* - name: Publish to PyPI run: uv publish -v wheels_uv/* @@ -39,7 +36,7 @@ jobs: environment: name: release permissions: - id-token: write # For PyPI's trusted publishing + PEP 740 attestations + id-token: write # For PyPI's trusted publishing steps: - name: "Install uv" uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0 @@ -48,8 +45,5 @@ jobs: pattern: wheels_uv_build-* path: wheels_uv_build merge-multiple: true - - uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4 - with: - paths: wheels_uv_build/* - name: Publish to PyPI run: uv publish -v wheels_uv_build/*