Bump hynek/build-and-inspect-python-package from 2.11.0 to 2.12.0 (#2146)

Bumps
[hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package)
from 2.11.0 to 2.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hynek/build-and-inspect-python-package/releases">hynek/build-and-inspect-python-package's
releases</a>.</em></p>
<blockquote>
<h2>v2.12.0</h2>
<p>This release only updates our dependencies to support packaging
metadata v2.4 (as created, for example, by recent Hatchling
releases).</p>
<blockquote>
<p>[!NOTE]
To upload packages with metadata v2.4 (which is required for <a
href="https://peps.python.org/pep-0639/">PEP 639</a> license metadata)
using the <a
href="https://github.com/pypa/gh-action-pypi-publish/">official
<em>pypi-publish</em> GitHub Action</a>, you must make sure to use its
<a
href="https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.12.4">v1.12.4</a>
or later.</p>
</blockquote>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md">hynek/build-and-inspect-python-package's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>The format is based on <a
href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>, and
this project adheres to <a
href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<h2><a
href="https://github.com/hynek/build-and-inspect-python-package/compare/v2.12.0...main">Unreleased</a></h2>
<h2><a
href="https://github.com/hynek/build-and-inspect-python-package/compare/v2.11.0...v2.12.0">2.12.0</a></h2>
<h3>Changed</h3>
<ul>
<li>This release only updates the tools we use.
It's important for being able to handle packaging metadata 2.4, as
published by recent versions of Hatchling, though.
<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/pull/161">#161</a></li>
</ul>
<h2><a
href="https://github.com/hynek/build-and-inspect-python-package/compare/v2.10.0...v2.11.0">2.11.0</a></h2>
<h3>Added</h3>
<ul>
<li>New output: <code>package_version</code> is the version of the
package that was built.
<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/pull/152">#152</a></li>
</ul>
<h2><a
href="https://github.com/hynek/build-and-inspect-python-package/compare/v2.9.0...2.10.0">2.10.0</a></h2>
<h3>Changed</h3>
<ul>
<li>Remove <code>.gitignore</code> from the build target directory to
avoid <a href="https://github.com/hynek/svcs/attestations/2821122">silly
attestations</a>.
<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/pull/149">#149</a></li>
</ul>
<h2><a
href="https://github.com/hynek/build-and-inspect-python-package/compare/v2.8.0...v2.9.0">2.9.0</a></h2>
<h3>Changed</h3>
<ul>
<li><code>uv build</code> is now used instead of the <a
href="https://pypi.org/project/build/"><em>build</em></a> package.
Since the actual build of the packages is done by the packaging backend
(the one you define in your <code>pyproject.toml</code> under
<code>build-system.build-backend</code> -- for example, Setuptools or
Hatchling), this should make no difference except for faster runs.
<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/pull/140">#140</a></li>
</ul>
<h2><a
href="https://github.com/hynek/build-and-inspect-python-package/compare/v2.7.0...v2.8.0">2.8.0</a>
- 2024-07-25</h2>
<h3>Changed</h3>
<ul>
<li>Use <em>uv</em>'s new <code>uv cache prune --ci</code> to only cache
downloaded files.
This makes the cache smaller and faster to pack/unpack.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/b5076c307dc91924a82ad150cdd1533b444d3310"><code>b5076c3</code></a>
v2.12.0</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/651083fb107b0b697ef4eef541fbc10af853deab"><code>651083f</code></a>
Add changelog</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/529b90d1d913310c6bd3723f6a97a5c91d849db3"><code>529b90d</code></a>
Automated dependency upgrades (<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/issues/161">#161</a>)</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/8793720c45b1c809ad3f02cc1db617a9c1707569"><code>8793720</code></a>
Automated dependency upgrades (<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/issues/159">#159</a>)</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/30d17a144d704abec433c72215a45ffa00b6d2fd"><code>30d17a1</code></a>
Fix <code>package_version</code> example in readme to use `<a
href="https://pypi.org/prokect/">https://pypi.org/prokect/</a>&lt;pac...</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/00971ccd9ead7d470f48a2f3a7c8abceafcd300d"><code>00971cc</code></a>
Start new cycle</li>
<li>See full diff in <a
href="https://github.com/hynek/build-and-inspect-python-package/compare/14c7e53f5d033cfa99f7af916fa59a6f7f356394...b5076c307dc91924a82ad150cdd1533b444d3310">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hynek/build-and-inspect-python-package&package-manager=github_actions&previous-version=2.11.0&new-version=2.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

<!-- readthedocs-preview pydata-sphinx-theme start -->
----
📚 Documentation preview 📚:
https://pydata-sphinx-theme--2146.org.readthedocs.build/en/2146/

<!-- readthedocs-preview pydata-sphinx-theme end -->

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tania Allard <[email protected]>

Author: 2 people

.github/workflows/prerelease.yml

@@ -52,7 +52,7 @@ jobs:
           echo "PYTEST_ERRORS=$?" >> $GITHUB_ENV
 
       - name: "Build and inspect package 📦"
-        uses: hynek/build-and-inspect-python-package@14c7e53f5d033cfa99f7af916fa59a6f7f356394
+        uses: hynek/build-and-inspect-python-package@b5076c307dc91924a82ad150cdd1533b444d3310
         if: matrix.python-version == '3.9'
         id: baipp
 

.github/workflows/publish.yml

@@ -50,7 +50,7 @@ jobs:
       - run: python -Im pip install tox-uv
 
       - name: "Build and inspect package 📦"
-        uses: hynek/build-and-inspect-python-package@14c7e53f5d033cfa99f7af916fa59a6f7f356394 # 2.11.0
+        uses: hynek/build-and-inspect-python-package@b5076c307dc91924a82ad150cdd1533b444d3310 # 2.12.0
         id: baipp
 
       - run: echo Packages can be found at "${BAIPP_DIST}"