Skip to content

Commit 2069221

Browse files
Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows (#1273)
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.12.4 to 1.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/gh-action-pypi-publish/releases">pypa/gh-action-pypi-publish's releases</a>.</em></p> <blockquote> <h2>v1.13.0</h2> <!-- raw HTML omitted --> <blockquote> <p>[!important] 🚨 This release includes fixes for <a href="https://github.com/pypa/gh-action-pypi-publish/security/advisories/GHSA-vxmw-7h4f-hqxh">GHSA-vxmw-7h4f-hqxh</a> discovered by <a href="https://github.com/woodruffw"><code>@​woodruffw</code></a><a href="https://github.com/sponsors/woodruffw">💰</a>. We've also integrated <a href="http://zizmor.sh">Zizmor</a> to catch similar issues in the future and you should too.</p> </blockquote> <h2>✨ New Stuff</h2> <p><a href="https://github.com/woodruffw"><code>@​woodruffw</code></a><a href="https://github.com/sponsors/woodruffw">💰</a> updated the README to no longer mention the attestations feature being experimental in <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/347">#347</a>: it's been rather stable for a year already 🎉 He also added more diagnostic output which includes printing out the GitHub Environment claim via <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/371">#371</a> and warning about the unsupported reusable workflows configurations <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/306">#306</a>, when using Trusted Publishing.</p> <blockquote> <p>[!tip] The official support for reusable workflows is currently blocked on changes to PyPI. To get updates about progress on the action side, you may want to subscribe to <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/166">#166</a>. At PyCon US 2025 Sprints, <a href="https://github.com/facutuesca"><code>@​facutuesca</code></a><a href="https://github.com/sponsors/facutuesca">💰</a>, <a href="https://github.com/miketheman"><code>@​miketheman</code></a><a href="https://github.com/sponsors/miketheman">💰</a>, <a href="https://github.com/woodruffw"><code>@​woodruffw</code></a><a href="https://github.com/sponsors/woodruffw">💰</a> and I<a href="https://github.com/sponsors/webknjaz">💰</a> spent several hours IRL brainstorming how to fix this and migrate projects that happen to rely on an obscure corner case with reusable workflows that temporarily allows them to function by accident. The result of that discussion is posted @ <a href="https://redirect.github.com/pypi/warehouse/issues/11096#issuecomment-2895081700">pypi/warehouse#11096</a>. Note that this is a volunteer-led effort and there is no ETA. If you need this soon, make your employer sponsor the PSF and maybe they'll be able to hire somebody for this work on Warehouse.</p> </blockquote> <p>In addition to that, <a href="https://github.com/konstin"><code>@​konstin</code></a><a href="https://github.com/sponsors/konstin">💰</a> sent <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/378">#378</a> to pin <code>actions/setup-python</code> to a SHA hash. This makes <code>pypi-publish</code> compatible with new GitHub policies that allow organizations to mandate hash-pinning actions used in workflows.</p> <h2>🛠️ Internal Dependencies</h2> <p><a href="https://github.com/webknjaz"><code>@​webknjaz</code></a><a href="https://github.com/sponsors/webknjaz">💰</a> made a bunch of updates to the action runtime which includes bumping it to Python 3.13 in <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/331">#331</a> and updating the dependency tree across the board. <code>pip-with-requires-python</code> is no longer being installed (<a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/332">#332</a>). Some related bumps were contributed by <a href="https://github.com/woodruffw"><code>@​woodruffw</code></a><a href="https://github.com/sponsors/woodruffw">💰</a> (<a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/359">#359</a>) and <a href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a><a href="https://github.com/sponsors/kurtmckee">💰</a> sent a contributor-facing PR, bumping the linting configuration via <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/335">#335</a>.</p> <h2>💪 New Contributors</h2> <ul> <li><a href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/335">#335</a></li> <li><a href="https://github.com/konstin"><code>@​konstin</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/378">#378</a></li> </ul> <p><strong>🪞 Full Diff</strong>: <a href="https://github.com/pypa/gh-action-pypi-publish/compare/v1.12.4...v1.13.0">https://github.com/pypa/gh-action-pypi-publish/compare/v1.12.4...v1.13.0</a></p> <p><strong>🧔‍♂️ Release Manager:</strong> <a href="https://github.com/sponsors/webknjaz"><code>@​webknjaz</code></a> <a href="https://stand-with-ukraine.pp.ua">🇺🇦</a></p> <p><strong>💬 Discuss</strong> <a href="https://bsky.app/profile/webknjaz.me/post/3lxxzvzhvfc2e">on Bluesky 🦋</a>, <a href="https://mastodon.social/@webknjaz/115143522527224444">on Mastodon 🐘</a> and <a href="https://github.com/pypa/gh-action-pypi-publish/discussions/379">on GitHub</a>.</p> <p><a href="https://github.com/sponsors/webknjaz"><img src="https://img.shields.io/badge/%40webknjaz-transparent?logo=githubsponsors&amp;logoColor=%23EA4AAA&amp;label=Sponsor&amp;color=2a313c" alt="GH Sponsors badge" /></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e"><code>ed0c539</code></a> 📦📌 Bump the pinned dependency tree</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/77db1b7cf7dcea2e403bb4350516284282740dd6"><code>77db1b7</code></a> Merge branch PR <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/306">#306</a>, GHSA-vxmw-7h4f-hqxh fix and PR <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/378">#378</a> into unstable/v1</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/280b3a1b7e38a360b85b4ee41645d27b79bde3fc"><code>280b3a1</code></a> Alias <code>typing as t</code> in imports</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/e380240d7e3673f460e0621686f33fbbf9594e85"><code>e380240</code></a> Use <code>object</code> in place of <code>typing.Any</code> in annotations</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/e50bff6eb477e46de0cbacc0693737ecb690eb0f"><code>e50bff6</code></a> Deduplicate claim ref lookup</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/decbc9a5d448364aa64c211724dc79a2cefcab2a"><code>decbc9a</code></a> Hint people to subscribe to <a href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/166">#166</a> for notifications</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/8208ad36a18e6fdd644f6ad69dc70c833d8af633"><code>8208ad3</code></a> Ask not to report bugs with reusable workflow</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/ff0fef5bdb66aa250f741d5d8b00a8b78b9dffd5"><code>ff0fef5</code></a> 🧪 Scope WPS202 suppression to specific files</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/1293b8c325b5f9abcab5160ee3553de2ee6a883f"><code>1293b8c</code></a> Use yamllint disable line length lint</li> <li><a href="https://github.com/pypa/gh-action-pypi-publish/commit/ed01280d14b6f9a0edaa1a5494d8f7ffed709083"><code>ed01280</code></a> Linter (different rule)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/gh-action-pypi-publish/compare/v1.12.4...v1.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.12.4&new-version=1.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/basilisp-lang/basilisp/network/alerts). </details> --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Chris Rink <[email protected]>
1 parent a35d85f commit 2069221

File tree

6 files changed

+15
-12
lines changed

6 files changed

+15
-12
lines changed

.github/workflows/pypi-release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,4 +73,4 @@ jobs:
7373
path: dist/
7474
merge-multiple: true
7575
- name: Publish package distributions to PyPI
76-
uses: pypa/gh-action-pypi-publish@v1.12.4
76+
uses: pypa/gh-action-pypi-publish@v1.13.0

.github/workflows/test-pypi-release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
path: dist/
4444
merge-multiple: true
4545
- name: Publish package distributions to PyPI
46-
uses: pypa/gh-action-pypi-publish@v1.12.4
46+
uses: pypa/gh-action-pypi-publish@v1.13.0
4747
with:
4848
repository-url: https://test.pypi.org/legacy/
4949
skip-existing: true

src/basilisp/lang/compiler/exception.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -122,7 +122,7 @@ def format_compiler_exception( # pylint: disable=too-many-branches,unused-argum
122122
code."""
123123
context_exc: Optional[BaseException] = e.__cause__
124124

125-
lines = [os.linesep]
125+
lines: list[str] = [os.linesep]
126126
if context_exc is not None:
127127
lines.append(f" exception: {type(context_exc)} from {type(e)}{os.linesep}")
128128
else:

src/basilisp/lang/compiler/generator.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1598,7 +1598,7 @@ def _wrapped_do(
15981598
) -> GeneratedPyAST[T_pynode]:
15991599
if isinstance(node, Do) and node.use_var_indirection:
16001600
with ctx.with_var_indirection_override():
1601-
return f(ctx, cast(T_node, node), *args, **kwargs)
1601+
return f(ctx, node, *args, **kwargs)
16021602
else:
16031603
with ctx.with_var_indirection_override(False):
16041604
return f(ctx, node, *args, **kwargs)

src/basilisp/lang/interfaces.py

Lines changed: 10 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -549,11 +549,11 @@ def seq(self) -> "Optional[ISeq[T]]": # type: ignore[override]
549549
raise NotImplementedError()
550550

551551

552-
T_tcoll_co = TypeVar("T_tcoll_co", bound="ITransientCollection", covariant=True)
552+
T_tcoll = TypeVar("T_tcoll", bound="ITransientCollection")
553553

554554

555555
# Including ABC as a base seems to cause catastrophic meltdown.
556-
class IEvolveableCollection(Generic[T_tcoll_co]):
556+
class IEvolveableCollection(Generic[T_tcoll]):
557557
"""``IEvolveableCollection`` types support creating transient variants of persistent
558558
data structures which can be modified efficiently and then returned back into
559559
persistent data structures once modification is complete.
@@ -563,7 +563,7 @@ class IEvolveableCollection(Generic[T_tcoll_co]):
563563
:lpy:fn:`transient`"""
564564

565565
@abstractmethod
566-
def to_transient(self) -> T_tcoll_co:
566+
def to_transient(self) -> T_tcoll:
567567
raise NotImplementedError()
568568

569569

@@ -578,11 +578,11 @@ class ITransientCollection(Generic[T]):
578578
__slots__ = ()
579579

580580
@abstractmethod
581-
def cons_transient(self: T_tcoll_co, *elems: T) -> "T_tcoll_co":
581+
def cons_transient(self: T_tcoll, *elems: T) -> "T_tcoll":
582582
raise NotImplementedError()
583583

584584
@abstractmethod
585-
def to_persistent(self: T_tcoll_co) -> "IPersistentCollection[T]":
585+
def to_persistent(self: T_tcoll) -> "IPersistentCollection[T]":
586586
raise NotImplementedError()
587587

588588

@@ -720,6 +720,9 @@ def seq_equals(s1: Union["ISeq", ISequential], s2: Any) -> bool:
720720
return True
721721

722722

723+
T_inner = TypeVar("T_inner")
724+
725+
723726
class ISeq(ILispObject, IPersistentCollection[T]):
724727
"""``ISeq`` types represent a potentially infinite sequence of elements.
725728
@@ -733,7 +736,7 @@ class ISeq(ILispObject, IPersistentCollection[T]):
733736

734737
__slots__ = ()
735738

736-
class _SeqIter(Iterator[T]):
739+
class _SeqIter(Iterator[T_inner]):
737740
"""Stateful iterator for sequence types.
738741
739742
This is primarily useful for avoiding blowing the stack on a long (or infinite)
@@ -742,7 +745,7 @@ class _SeqIter(Iterator[T]):
742745

743746
__slots__ = ("_cur",)
744747

745-
def __init__(self, seq: "ISeq[T]"):
748+
def __init__(self, seq: "ISeq[T_inner]"):
746749
self._cur = seq
747750

748751
def __next__(self):

src/basilisp/lang/reader.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -162,7 +162,7 @@ def format_syntax_error( # pylint: disable=unused-argument
162162

163163
context_exc: Optional[BaseException] = e.__cause__
164164

165-
lines = [os.linesep]
165+
lines: list[str] = [os.linesep]
166166
if context_exc is not None:
167167
lines.append(f" exception: {type(context_exc)} from {type(e)}{os.linesep}")
168168
else:

0 commit comments

Comments
 (0)