Skip to content

Conversation

@di
Copy link
Member

@di di commented Dec 11, 2025

Summary

Release v0.0.29.

Checklist

Making a release

  • Bump the version in src/pypi_attestations/__init__.py
  • Add a new subheading in the CHANGELOG for the new version
  • Add a link at the bottom of the CHANGELOG for the diff of the new version

@di di enabled auto-merge (squash) December 11, 2025 02:59
@di
Copy link
Member Author

di commented Dec 11, 2025

Seems like there might be something wrong with the EXTREMELY_DANGEROUS_PUBLIC_OIDC_BEACON here...

@di di merged commit fb35ffd into pypi:main Dec 11, 2025
5 of 15 checks passed
@woodruffw
Copy link
Member

Oops, merged before seeing that comment 🤦. Should be fine, since it's just a sporadic failure with the beacon.

Seems like there might be something wrong with the EXTREMELY_DANGEROUS_PUBLIC_OIDC_BEACON here...

Yeah, I've been seeing that a lot recently. I think GitHub has upped their caching on "raw" content requests, so we end up getting stale OIDC tokens a lot here. I recently worked around that in another repo by using git ls-remote to always refresh to the latest ref for the branch; that would probably work here too 🙂

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants