chore(deps): bump the actions group across 1 directory with 2 updates (#947)

* chore(deps): bump the actions group across 1 directory with 2 updates

Bumps the actions group with 2 updates in the / directory: [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `docker/setup-qemu-action` from 3.0.0 to 3.2.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@v3.0.0...v3.2.0)

Updates `actions/attest-build-provenance` from 1.1.2 to 1.4.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@173725a...210c191)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update pyproject.toml

* Update README.md

* style: pre-commit fixes

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Henry Schreiner <[email protected]>
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Author: 3 people

.github/workflows/wheels.yml

@@ -53,7 +53,7 @@ jobs:
           fetch-depth: 0
           submodules: true
 
-      - uses: docker/setup-qemu-action@v3.0.0
+      - uses: docker/setup-qemu-action@v3.2.0
         with:
           platforms: all
 
@@ -154,7 +154,7 @@ jobs:
         run: ls -lh dist
 
       - name: Generate artifact attestation for sdist and wheels
-        uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d # v1.1.2
+        uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0
         with:
           subject-path: "dist/boost_histogram-*"
 

README.md

@@ -190,19 +190,17 @@ when you run the above command on a supported platform. Wheels are produced usin
 [cibuildwheel](https://cibuildwheel.readthedocs.io/en/stable/); all common
 platforms have wheels provided in boost-histogram:
 
-| System           | Arch        | Python versions                 | PyPy versions       |
-| ---------------- | ----------- | ------------------------------- | ------------------- |
-| ManyLinux2014    | 64-bit      | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 | 3.7, 3.8, 3.9, 3.10 |
-| ManyLinux2014    | ARM64       | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 | 3.7, 3.8, 3.9, 3.10 |
-| MuslLinux_1_1    | 64-bit      | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 |                     |
-| macOS 10.9+      | 64-bit      | 3.7                             | 3.7, 3.8, 3.9, 3.10 |
-| macOS Universal2 | Arm64       | 3.8, 3.9, 3.10, 3.11, 3.12      |                     |
-| Windows          | 32 & 64-bit | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 |                     |
-| Windows          | 64-bit      |                                 | 3.7, 3.8, 3.9, 3.10 |
-
-- manylinux2014: Requires pip 19.3.
-- ARM on Linux is supported. PowerPC or IBM-Z available on request.
-- macOS Universal2 wheels for Apple Silicon and Intel provided for Python 3.8+ (requires Pip 21.0.1 or newer).
+| System            | Arch   | Python versions                 | PyPy versions |
+| ----------------- | ------ | ------------------------------- | ------------- |
+| manylinux2014     | 64-bit | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 | 3.9, 3.10     |
+| manylinux2014     | ARM64  | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 | 3.9, 3.10     |
+| musllinux_1_1     | 64-bit | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 |               |
+| macOS 10.9+ Intel | 64-bit | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 | 3.9, 3.10     |
+| macOS 11+ AS      | Arm64  | 3.8, 3.9, 3.10, 3.11, 3.12      | 3.9, 3.10     |
+| Windows           | 32-bit | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 |               |
+| Windows           | 64-bit | 3.7, 3.8, 3.9, 3.10, 3.11, 3.12 | 3.9, 3.10     |
+
+PowerPC or IBM-Z wheels are not provided but are available on request.
 
 If you are on a Linux system that is not part of the "many" in manylinux or musl in musllinux, such as ClearLinux, building from source is usually fine, since the compilers on those systems are often quite new. It will just take longer to install when it is using the sdist instead of a wheel. All dependencies are header-only and included.
 
@@ -216,7 +214,7 @@ conda install -c conda-forge boost-histogram
 
 #### Source builds
 
-For a source build, for example from an "SDist" package, the only requirements are a C++14 compatible compiler. The compiler requirements are dictated by Boost.Histogram's C++ requirements: gcc >= 5.5, clang >= 3.8, or msvc >= 14.1. You should have a version of pip less than 2-3 years old (10+).
+For a source build, for example from an "SDist" package, the only requirements are a C++14 compatible compiler. The compiler requirements are dictated by Boost.Histogram's C++ requirements: gcc >= 5.5, clang >= 3.8, or msvc >= 14.1.
 
 Boost is not required or needed (this only depends on included header-only dependencies). You can install directly from GitHub if you would like.
 

pyproject.toml

@@ -159,13 +159,15 @@ build-frontend = "build[uv]"
 test-extras = "test"
 test-command = "pytest --benchmark-disable {project}/tests"
 test-skip = [
-  "pp37-*",
-  "pp38-*",
   "pp310-*",
   "*universal2:arm64",
   "cp38-macosx_*:arm64",
   "cp*-*musllinux*",  # segfault
 ]
+skip = [
+  "pp37-*",
+  "pp38-*",
+]
 environment-pass = ["SETUPTOOLS_SCM_PRETEND_VERSION"]
 environment.PIP_ONLY_BINARY = "numpy"
 environment.PIP_PREFER_BINARY = "1"