build(deps): bump hynek/build-and-inspect-python-package from 1 to 2 (#…

…1050)

Bumps
[hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package)
from 1 to 2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hynek/build-and-inspect-python-package/releases">hynek/build-and-inspect-python-package's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.0</h2>
<p>This release switches to <a
href="https://github.com/actions/upload-artifact"><em>actions/<strong>upload</strong>-artifact</em></a>
v4, which is incompatible with older versions of <a
href="https://github.com/actions/upload-artifact"><em>actions/<strong>download</strong>-artifact</em></a>
(and vice versa).</p>
<ul>
<li>If you're using <code>download-artifact@v3</code>, do
<strong>not</strong> upgrade.</li>
<li>If you want to use <code>download-artifact@v4</code>, you
<strong>must</strong> upgrade.</li>
</ul>
<h2>v1.5.4</h2>
<h3>Fixed</h3>
<ul>
<li>Stop trying to cache.
Fixes <code>Error: No file in /home/runner/work/pytest-cpp/pytest-cpp
matched to [**/requirements.txt or **/pyproject.toml], make sure you
have checked out the target repository</code>
<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/pull/76">#76</a></li>
</ul>
<h2>v1.5.3</h2>
<h3>Changed</h3>
<ul>
<li>Hopefully nothing, but this release comes from the main branch
again.</li>
</ul>
<h2>v1.5.2</h2>
<h3>Fixed</h3>
<ul>
<li>Turns out it made a huge difference. This release is branched
directly from v1.5 and only updates the dependencies.</li>
</ul>
<h2>v1.5.1</h2>
<h3>Changed</h3>
<ul>
<li>
<p>Updates of the tools we use. Notably this fixes
<em>check-wheel-contents</em> on Python 3.12.</p>
</li>
<li>
<p>This shouldn't make any difference, but all management and command
running is now done by <a href="https://pdm.fming.dev/">PDM</a>. <a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/pull/57">#57</a></p>
</li>
</ul>
<h2>v1.5.0</h2>
<h3>Added</h3>
<ul>
<li>Set <a
href="https://reproducible-builds.org/specs/source-date-epoch/"><code>SOURCE_DATE_EPOCH</code></a>
based on the timestamp of the last commit for build reproducibility.
<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/pull/30">#30</a></li>
<li>The <em>tree</em> output now has ISO timestamps.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Use <code>3.x</code> version specifier in <code>setup-python</code>
for the venv used by our tools.
As of writing, that's 3.11.</li>
</ul>
<h2>v1.4.1</h2>
<p>Contains only a fix for a <a
href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/">deprecation
warning</a>.</p>
<h2>v1.4</h2>
<h3>Added</h3>
<ul>
<li>The contents listing of the SDist, the contents listing of the
wheel, <em>and</em> the package metadata are now conveniently added to
the CI run summary. So, you don't have to click through the build logs
or download anything to give it a quick glimpse.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md">hynek/build-and-inspect-python-package's
changelog</a>.</em></p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/c9fea028dc9c880c4d00d54727eff3fb1190d082"><code>c9fea02</code></a>
v2.0.0</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/2385bede3021f7223c7a46a953df125acf9a51c2"><code>2385bed</code></a>
Switch to upload-artifact v4 (<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/issues/78">#78</a>)</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/337438e007e4b7b68733b23b09ae6d989b16c99e"><code>337438e</code></a>
Automated dependency upgrades (<a
href="https://redirect.github.com/hynek/build-and-inspect-python-package/issues/77">#77</a>)</li>
<li><a
href="https://github.com/hynek/build-and-inspect-python-package/commit/36fb41da824c06586b7996b863191ff60767dab4"><code>36fb41d</code></a>
New cycle</li>
<li>See full diff in <a
href="https://github.com/hynek/build-and-inspect-python-package/compare/v1...v2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hynek/build-and-inspect-python-package&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/tests.yml

@@ -184,4 +184,4 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: hynek/build-and-inspect-python-package@v1
+      - uses: hynek/build-and-inspect-python-package@v2