Update pypa/gh-action-pypi-publish action to v1.10.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
pypa/gh-action-pypi-publish	action	minor	v1.8.14 -> v1.10.0

---

Release Notes

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

v1.10.0

Compare Source

🔏 Anything fancy, eh?

This time, @​woodruffw💰 implemented support for PEP 740 attestations functionality in #​236 and #​245. This is a big deal, as it is a huge step forward to replacing what the deprecated GPG signatures used to provide in a more meaningful way.

🙏 Please, thank William for working on this amazing improvement for the ecosystem! The overall effort is tracked @&#https://github.com/pypi/warehouse/issues/15871/15871, by the way.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.9.0...v1.10.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

v1.9.0

Compare Source

💅 Cosmetic Output Improvements

• @​woodruffw💰 updated the tense on password nudge in #​234
• @​shenxianpeng💰 helped us disable the progress bar that was being produced by the twine upload command via #​231
• @​woodruffw💰 also linked the PyPI status dashboard in the trusted publishing error message via https://github.com/pypa/gh-action-pypi-publish/pull/243

🛠️ Internal Dependencies

• pre-commit linters got auto-updated @​ #​225
• some notable dependency bumps include
  • cryptography == 42.0.7
  • id == 1.4.0
  • idna == 3.7 via #​228
  • requests == 2.32.0 via #​240
  • Twine == 5.1.0

⚙️ Secret Stuff

In #​241, @​br3ndonland💰 added a Docker label linking the container image to this repository for GHCR to display it nicely. This is preparatory work for a big performance-focused refactoring he's working on in #​230.

💪 New Contributors

• @​shenxianpeng made their first contribution in https://github.com/pypa/gh-action-pypi-publish/pull/231
• @​br3ndonland made their first contribution in https://github.com/pypa/gh-action-pypi-publish/pull/241

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.14...v1.9.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​pradyunsg💰 for promptly unblocking this release to Marketplace as GitHub started asking for yet another developer agreement signature from the organization admins.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.