v0.7.1
- Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0 (#224). In version 3.0.0 of sigstore/gh-action-sigstore-python, several changes, additions, and removals have been implemented. Notably, certain settings such as fulcio-url, rekor-url, ctfe, and rekor-root-pubkey have been removed. Additionally, the output settings signature, certificate, and bundle have also been removed. The inputs are now parsed according to POSIX shell lexing rules for better consistency. The release-signing-artifacts setting no longer causes a hard error when used under the incorrect event. Furthermore, various deprecations present in sigstore-python's 2.x series have been resolved. The default suffix has been changed from .sigstore to .sigstore.json, in line with Sigstore's client specification. The release-signing-artifacts setting now defaults to true. This version also includes several bug fixes and improvements to support CI runners that use PEP 668 to constrain global package prefixes.
- Use default factory to create
Tile._position
(#226). In this change, the default value creation for the_position
field in various classes includingTile
,MarkdownTile
,TableTile
, andCounterTile
has been updated. Previously, a newPosition
object was explicitly created for the default value. With this update, thedefault_factory
argument of thedataclasses.field
function is now used to create a newPosition
object. This change is made in anticipation of the Python 3.11 release, which modifies the field default mutability check behavior. By utilizing thedefault_factory
approach, we ensure that a newPosition
object is generated during each instance creation, rather than reusing a single default instance. This guarantees the immutability of default values and aligns with best practices for forward-compatibility with future Python versions. It is important to note that this modification does not affect the functionality of the classes but enhances their initialization process.
Dependency updates:
- Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0 (#224).
Contributors: @JCZuurmond, @dependabot[bot], @nfx