Repository: igmhub/picca (language: python)

Issue:
Issues in automatic upload to PyPI
@corentinravoux @calumgordon It looks like since version 6.7.0 the upload to PyPI is broken so pip install picca will install v6.6.1 at the moment. Not sure what exactly broke it, could either be one of the changes between commit 30a2530a42162e78f5a30762d3ba547a54eadac0 and commit 6be220021cef1ef926168fdf52a0550037c0e15e, i.e. from PR #1081. Could also be a change on the Github side, making the previous setup unusable...


Discussion / hints:

Fix patch:
diff --git a/.github/workflows/bump_version.yml b/.github/workflows/bump_version.yml
index 29fee4f64..3def75ac8 100644
--- a/.github/workflows/bump_version.yml
+++ b/.github/workflows/bump_version.yml
@@ -13,7 +13,7 @@ jobs:
   bump_version:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         token: ${{ secrets.PAT_MW_TOKEN_ACTION }}
         
@@ -23,7 +23,7 @@ jobs:
         git config --global user.name "Michael Walther (bot)"
     
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       
     - name: Install bump2version
       run:  pip install bump2version
diff --git a/.github/workflows/pylint.yml b/.github/workflows/pylint.yml
index dfe5ee1eb..25e2a9cf4 100644
--- a/.github/workflows/pylint.yml
+++ b/.github/workflows/pylint.yml
@@ -15,9 +15,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Set up Python 3.12
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: 3.12
     - name: Install dependencies
diff --git a/.github/workflows/python_package.yml b/.github/workflows/python_package.yml
index c751d0cbe..7bef9f300 100644
--- a/.github/workflows/python_package.yml
+++ b/.github/workflows/python_package.yml
@@ -29,9 +29,9 @@ jobs:
 #      OPENBLAS_NUM_THREADS: 1
 #      NUMEXPR_NUM_THREADS: 1
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install dependencies


Test patch:
diff --git a/.github/workflows/publish-to-test-pypi.yml b/.github/workflows/publish-to-test-pypi.yml
index 1984d920d..fcf0000f4 100644
--- a/.github/workflows/publish-to-test-pypi.yml
+++ b/.github/workflows/publish-to-test-pypi.yml
@@ -14,9 +14,9 @@ jobs:
       id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
       
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: "3.x"
 
@@ -37,7 +37,8 @@ jobs:
     - name: Publish distribution 📦 to Test PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
       with:
-        repository-url: https://test.pypi.org/legacy/
+        repository_url: https://test.pypi.org/legacy/
+        attestations: false
         
     - name: Publish distribution 📦 to PyPI
       if: startsWith(github.ref, 'refs/tags')