v2.14.0

Changed

• Update tools such that they work on Python 3.14 (which is now 3.x on GitHub Actions). #182

• The action now ignores UV_PYTHON coming from the outside. #184

v2.13.0

Added

• New output: package_name is the name of the built package as stored in metadata.
  #162

• The package name is now part of the action summary which is helpful when you build more than one package from a repository.
  #169

Changed

• All GitHub actions are now pinned to exact hashes for better reproducibility and mild security improvements.

  Since chosen prefix SHA-1 hash collision attacks exist, this is but security theater against serious attackers.

v2.12.0

This release only updates our dependencies to support packaging metadata v2.4 (as created, for example, by recent Hatchling releases).

Note

To upload packages with metadata v2.4 (which is required for PEP 639 license metadata) using the official pypi-publish GitHub Action, you must make sure to use its v1.12.4 or later.

v2.11.0

Added

• New output: package_version is the version of the package that was built. #152

v2.10.0

Changed

• Remove .gitignore from the build target directory to avoid silly attestations. #149

v2.9.0

Changed

• uv build is now used instead of the build package. Since the actual build of the packages is done by the packaging backend (the one you define in your pyproject.toml under build-system.build-backend -- for example, Setuptools or Hatchling), this should make no difference except for faster runs. #140

v2.8.0

Changed

• We now use uv's new uv cache prune --ci to only cache downloaded files. This makes the cache smaller and faster to pack/unpack. #135

Fixed

• Turns out, the default location of uv's cache cannot be cached and actions/cache fails silently with an opaque "Path(s) specified in the action for caching do(es) not exist, hence no cache is being saved." log message. We have moved the cache to /tmp. #135

v2.7.0

Added

• A header before package contents in the summary. Especially useful together with a preceding build provenance attestation. #131

v2.6.0

Added

• Support for ubuntu-24.04 builders. #126

• New output: artifact-name is the name of the uploaded artifact. #125

v2.5.0

Added

• New input: attest-build-provenance-github generates signed build provenance attestations for workflow artifacts.
  #122