From f4d342171d5e593a3cca0a5d354e2476a7035ac2 Mon Sep 17 00:00:00 2001 From: mrava87 Date: Sat, 3 Oct 2026 17:24:42 +0100 Subject: [PATCH] ci: bump build-and-inspect-python-package to v3.0.1 The v0.13.0 deploy run failed in the "Check PyPI README" step (`twine check --strict`) with: InvalidDistribution: Invalid distribution metadata: '2.5' is not a valid metadata version pyproject.toml does not pin hatchling, so the build picked up hatchling 1.32.x, which writes Metadata-Version 2.5. The action's v2 line bundles twine 6.2.0 / packaging 26.2, which do not know 2.5. v3.0.0 of the action ships Twine 7 with metadata 2.5 support. The action no longer force-moves major tags, so pin the full commit SHA. Co-Authored-By: Claude Sonnet 5.5 --- .github/workflows/deploy.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml index 01e3a232..c168f657 100755 --- a/.github/workflows/deploy.yaml +++ b/.github/workflows/deploy.yaml @@ -21,7 +21,7 @@ jobs: with: fetch-depth: 0 - name: Build and inspect package - uses: hynek/build-and-inspect-python-package@v2 + uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5 # v3.0.1 release-test-pypi: name: Publish in-dev package to test.pypi.org