From 57eb36f6a23ddf509984aa50de06db9ba1613f97 Mon Sep 17 00:00:00 2001 From: n1ckyb Date: Mon, 10 Aug 2026 00:28:57 +0100 Subject: [PATCH] chore(deps): bump pypa/gh-action-pypi-publish Rebuilt on the current RC. The branch previously carried an older ci.yml, and a pull_request run uses the workflow from the PR's own branch - so it ran a version that predated the no-token degrade handling and failed with '--from-parser-artifacts needs GH_TOKEN or GITHUB_TOKEN', which Dependabot PRs can never satisfy because they receive no repository secrets. Net change against the RC is the pinned SHA only. Co-Authored-By: Claude Opus 5 --- .github/workflows/publish.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 57a8c75..f049dfa 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -293,7 +293,7 @@ jobs: --expected-platform-pattern "win_amd64" --expected-platform-pattern "win_arm64" - - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1 + - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1 with: packages-dir: publish-dist/ attestations: false @@ -346,7 +346,7 @@ jobs: --max-release-mb 250 --expected-version "$INTENTUMDIFF_EXPECTED_VERSION" - - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1 + - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1 with: packages-dir: publish-dist/ repository-url: https://test.pypi.org/legacy/