Enable attestations for PyPI publish action

[keflavich]

This is recommended by .... the warnings on pypi publish workflows

Warning: The workflow was run with the 'attestations: true' input, but an explicit password was also set, disabling Trusted Publishing. As a result, the attestations input is ignored.
Warning: Trusted Publishers allows publishing packages to PyPI from automated environments like GitHub Actions without needing to use username/password combinations or API tokens to authenticate with PyPI. Read more: https://docs.pypi.org/trusted-publishers
Warning: A new Trusted Publisher for the currently running publishing workflow can be created by accessing the following link(s) while logged-in as an owner of the package(s):

[pllim]

I see this on your publish log.

---

A new Trusted Publisher for the currently running publishing workflow can be created by accessing the following link(s) while logged-in as an owner of the package(s):

https://pypi.org/manage/project/spectral-cube/settings/publishing/?provider=github&owner=radio-astro-tools&repository=spectral-cube&workflow_filename=publish.yml

---

Trusted Publishers allows publishing packages to PyPI from automated environments like GitHub Actions without needing to use username/password combinations or API tokens to authenticate with PyPI. Read more: https://docs.pypi.org/trusted-publishers

---

attestations input ignored

The workflow was run with the 'attestations: true' input, but an explicit password was also set, disabling Trusted Publishing. As a result, the attestations input is ignored.

[pllim]

Not sure what's up with the RTD failure here. Maybe transient?

Also not sure how you can test this until you make the next release.

[keflavich]

yeah, I already added the attestation - that link has no effect any more

[e-koch]

The rtf failure must be transient? Nothing changed on that end and the last successful build was 45 min ago.

[e-koch]

Oh I see the problem. @keflavich you need to rebase to update the rtd yaml file: https://github.com/radio-astro-tools/spectral-cube/blob/main/.readthedocs.yml

[keflavich]

apparently my local branch was in a weird state that caused this.

[pllim]

Huh, is the Windows failure expected?

E This probably means that tk wasn't installed properly.

[pllim]

Also do you need a branch manager?

[e-koch]

Also do you need a branch manager?

Hired!