You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Sviatoslav Sydorenko 87662b82de 🔏📦 Sign distribution packages on release ... This patch integrates an invocation of the `pypi-attestations` tool[[1]] into the release automation before calling Twine. When used locally and not within a known Trusted Publishing setup, it will invoke an OAuth flow, opening a browser window, prompting the caller to authenticate via GitHub. Once authorized and browser window closed, it will proceed to signing the distribution packages[[2]] locally using Sigstore. The resulting signatures are produced in the format outlined in PEP 740 [[3]]. Twine is then called with `--attestations` which is what will actually attach the digital signatures to the release on PyPI. [1]: https://docs.pypi.org/attestations/producing-attestations/#using-pypi-attestations [2]: https://packaging.python.org/en/latest/glossary/#term-Distribution-Package [3]: https://peps.python.org/pep-0740/		2 days ago
..
cli-doc	Omit pre-built man pages from sdist (#81395)	1 year ago
release.py	🔏📦 Sign distribution packages on release	2 days ago