infra: disable pypi release attestations (#13)

langchain-ai · Oct 31, 2024 · 8f36c7a · 8f36c7a
1 parent ebd1933
commit 8f36c7a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
@@ -215,6 +215,8 @@ jobs:
           packages-dir: ${{ inputs.working-directory }}/dist/
           verbose: true
           print-hash: true
+          # Temp workaround since attestations are on by default as of gh-action-pypi-publish v1\.11\.0
+          attestations: false
 
   mark-release:
     needs:

diff --git a/.github/workflows/_test_release.yml b/.github/workflows/_test_release.yml
@@ -93,3 +93,5 @@ jobs:
           # This is *only for CI use* and is *extremely dangerous* otherwise!
           # https://github.com/pypa/gh-action-pypi-publish#tolerating-release-package-file-duplicates
           skip-existing: true
+          # Temp workaround since attestations are on by default as of gh-action-pypi-publish v1.11.0
+          attestations: false