chore(deps): update pypa/gh-action-pypi-publish action to v1.6.4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
pypa/gh-action-pypi-publish	action	minor	v1.5.1 -> v1.6.4

---

Release Notes

pypa/gh-action-pypi-publish

v1.6.4

Compare Source

oh, boi! again?

This is the last one tonight, promise! It fixes this embarrassing bug that was actually caught by the CI but got overlooked due to the lack of sleep.
TL;DR GH passed $HOME from the external env into the container and that tricked the Python's site module to think that the home directory is elsewhere, adding non-existent paths to the env vars. See #​115.

Full Diff: pypa/gh-action-pypi-publish@v1.6.3...v1.6.4

v1.6.3

Compare Source

Another Release!? Why?

In https://github.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013, it was discovered that passing a $PATH variable even breaks the shebang. So this version adds more safeguards to make sure it keeps working with a fully broken $PATH.

Full Diff: pypa/gh-action-pypi-publish@v1.6.2...v1.6.3

v1.6.2

Compare Source

What's Fixed

• Made the $PATH and $PYTHONPATH environment variables resilient to broken values passed from the host runner environment, which previously allowed the users to accidentally break the container's internal runtime as reported in https://github.com/pypa/gh-action-pypi-publish/issues/112

Internal Maintenance Improvements

• Added a devpi-based smoke-test GitHub Actions CI/CD workflow by @​sesdaile-varmour in https://github.com/pypa/gh-action-pypi-publish/pull/111

New Contributors

• @​sesdaile-varmour made their first contribution in https://github.com/pypa/gh-action-pypi-publish/pull/111

Full Diff: pypa/gh-action-pypi-publish@v1.6.1...v1.6.2

v1.6.1

Compare Source

What's happened?!

There was a sneaky bug in v1.6.0 which caused Twine to be outside the import path in the Python runtime. It is fixed in v1.6.1 by updating $PYTHONPATH to point to a correct location of the user-global site-packages/ directory.

Full Diff: pypa/gh-action-pypi-publish@v1.6.0...v1.6.1

v1.6.0

Compare Source

Anything's changed?

The only update is that the Python runtime has been upgraded from 3.9 to 3.11. There are no functional changes in this release.

Full Changelog: pypa/gh-action-pypi-publish@v1.5.2...v1.6.0

v1.5.2

Compare Source

What's Improved

• Implemented the Twine transitive dependency tree pinning using pip-tools-generated constraint files. See https://github.com/pypa/gh-action-pypi-publish/issues/107 and https://github.com/pypa/gh-action-pypi-publish/issues/101 for details.

Full Diff: pypa/gh-action-pypi-publish@v1.5.1...v1.5.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.