Chores: unconditionally run builds; GHA dependabot; remove unnecessar…

…y pip upgrade; remove license year (#882)

.github/dependabot.yml

@@ -5,3 +5,7 @@ updates:
   schedule:
     interval: daily
   open-pull-requests-limit: 10
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: "monthly"

.github/workflows/build-release.yml

@@ -35,26 +35,29 @@ jobs:
             }
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python }}
-      - run: python -m pip install --upgrade pip wheel
       - run: pip install tox
       - run: tox -e${{ matrix.tox }}
   build:
-    if: startsWith(github.ref, 'refs/tags')
+    name: Build package
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.11"
       - name: Install pypa/build
-        run: python3 -m pip install build --user
+        run: python -m pip install build
       - name: Build a binary wheel and a source tarball
-        run: python3 -m build
+        run: python -m build
+      - name: Install twine
+        run: python -m pip install twine
+      - name: Check build
+        run: python -m twine check --strict dist/*
       - name: Store the distribution packages
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: python-package-distributions
           path: dist/
@@ -65,10 +68,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/[email protected]
-      - uses: actions/setup-python@v4.7.0
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.11"
-      - run: python -m pip install --upgrade pip
       - run: python -m pip install tox
       - run: python -m tox -e lint
   publish-to-pypi:
@@ -83,7 +85,7 @@ jobs:
       id-token: write
     steps:
       - name: Download all the dists
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: python-package-distributions
           path: dist/

LICENSE

@@ -1,4 +1,4 @@
-Copyright 2015-2024 Steven Loria, Jérôme Lafréchoux, and contributors
+Copyright Steven Loria, Jérôme Lafréchoux, and contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

docs/conf.py

@@ -1,7 +1,4 @@
-import datetime as dt
 import importlib
-import os
-import time
 
 import sphinx_rtd_theme
 
@@ -24,17 +21,10 @@
 
 issues_github_path = "marshmallow-code/apispec"
 
-
-# Use SOURCE_DATE_EPOCH for reproducible build output
-# https://reproducible-builds.org/docs/source-date-epoch/
-build_date = dt.datetime.utcfromtimestamp(
-    int(os.environ.get("SOURCE_DATE_EPOCH", time.time()))
-)
-
 source_suffix = ".rst"
 master_doc = "index"
 project = "apispec"
-copyright = f"2014-{build_date:%Y}, Steven Loria and contributors"
+copyright = "Steven Loria, Jérôme Lafréchoux, and contributors"
 
 version = release = importlib.metadata.version("apispec")