From 1d9db7e66a512ed2308c7d7b3096384d9cc1bde2 Mon Sep 17 00:00:00 2001 From: jsonbailey Date: Fri, 28 Aug 2026 16:10:55 -0500 Subject: [PATCH] chore: Bump gh-action-pypi-publish to v1.14.2 for metadata 2.5 support The 9.17.0 PyPI publish failed because the wheel has core Metadata-Version 2.5 (emitted by hatchling 1.32.0), which v1.14.1's bundled twine==6.1.0 rejects ("'2.5' is not a valid metadata version"). v1.14.2 bumps its internal twine to 7.0.0, which accepts metadata 2.5. Bump the pin in both the release-please and manual-publish workflows. --- .github/workflows/manual-publish.yml | 2 +- .github/workflows/release-please.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/manual-publish.yml b/.github/workflows/manual-publish.yml index e69c0654..43a96bcc 100644 --- a/.github/workflows/manual-publish.yml +++ b/.github/workflows/manual-publish.yml @@ -33,7 +33,7 @@ jobs: - name: Publish package distributions to PyPI if: ${{ format('{0}', inputs.dry_run) == 'false' }} - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 with: password: ${{env.PYPI_AUTH_TOKEN}} diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 0665bb93..658f442b 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -42,7 +42,7 @@ jobs: - name: Publish package distributions to PyPI if: ${{ steps.release.outputs.releases_created == 'true' }} - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 with: password: ${{env.PYPI_AUTH_TOKEN}}