From f741f29bf43c8d3e920f89b49c83084a9f6967f1 Mon Sep 17 00:00:00 2001 From: Brett Date: Thu, 6 Aug 2026 18:06:14 +1000 Subject: [PATCH] ci(release): disable PEP 740 attestations in PyPI publish Reusable workflow signs attestations under the caller's identity, which PyPI's publisher-identity check rejects with a 400. --- .github/workflows/release.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 57b2f12..4a261e7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -104,6 +104,9 @@ jobs: path: dist/ - name: Publish distribution to PyPI uses: pypa/gh-action-pypi-publish@release/v1 + with: + # Reusable workflow: PEP 740 attestations sign under the top-level caller's identity, which PyPI's publisher-identity check rejects with a 400. + attestations: false github-release: name: Upload distribution to GitHub Release