Bump nono-py from 0.10.1 to 0.11.0

[dependabot]

Bumps nono-py from 0.10.1 to 0.11.0.

Release notes

Sourced from nono-py's releases.

Release v0.11.0

What's Changed

• build(deps): bump astral-sh/setup-uv from 6 to 7 in the github-actions group by @​dependabot[bot] in nolabs-ai/nono-py#76
• refactor(audit): migrate event models to pydantic by @​lukehinds in nolabs-ai/nono-py#75
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in nolabs-ai/nono-py#80
• feat(audit): add audit ledger, merkle proofs, and robust validation by @​lukehinds in nolabs-ai/nono-py#82
• feat(audit-attestation): add audit session attestation by @​lukehinds in nolabs-ai/nono-py#85
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in nolabs-ai/nono-py#89
• chore: migrate org references from always-further to nolabs-ai by @​SequeI in nolabs-ai/nono-py#90
• ci(publish): support reusable workflows for pypi by @​lukehinds in nolabs-ai/nono-py#92
• chore(release): bump version to 0.11.0 by @​lukehinds in nolabs-ai/nono-py#93
• build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in the github-actions group across 1 directory by @​dependabot[bot] in nolabs-ai/nono-py#91
• ci(release): consolidate pypi publish to auto-release workflow by @​lukehinds in nolabs-ai/nono-py#96

Full Changelog: nolabs-ai/nono-py@v0.10.1...v0.11.0

Changelog

Sourced from nono-py's changelog.

Release Process

Releases are reviewed through pull requests. A maintainer should not push a release tag or create a GitHub release by hand for a normal release.

Normal Release

1. Create a branch for the release bump.
2. Bump the version in all three files:
   • pyproject.toml
   • Cargo.toml
   • python/nono_py/__init__.py
3. Open a pull request, for example chore(release): bump version to 0.11.0.
4. Wait for CI and review.
5. Merge the pull request to main.
6. Watch the Auto-release on version bump workflow.

The workflow publishes to PyPI first. Only after PyPI publish succeeds does it create the vX.Y.Z git tag and the GitHub release.

Do Not

• Do not push vX.Y.Z manually.
• Do not create the GitHub release manually.
• Do not run the PyPI publish workflow against an arbitrary tag or branch.
• Do not merge a release PR unless the three version files match.

Trusted Publishing

PyPI Trusted Publishing must be configured for:

.github/workflows/auto-release.yml

The PyPI upload step intentionally lives directly inside that workflow. Do not move publishing behind a reusable workflow; PyPI validates the exact workflow path that requests the OIDC token.

Recovery

If the workflow fails before PyPI upload, fix the problem in a PR and merge it.

If PyPI upload succeeds but tag or GitHub release creation fails, rerun Auto-release on version bump manually from main. The workflow checks PyPI, tags, and GitHub releases before acting, so it will skip the already-published PyPI version and create only the missing outputs.

If a version was published to PyPI with the wrong files, do not reuse that version. PyPI does not allow replacing files for an existing release. Bump to

... (truncated)

Commits

• 717d1c9 Merge pull request #96 from nolabs-ai/release-by-review
• f8f495f ci(release): consolidate pypi publish to auto-release workflow
• a0bacc9 Merge pull request #91 from nolabs-ai/dependabot/github_actions/github-action...
• 05f1259 build(deps): bump actions/setup-python
• 9bca15a Merge pull request #93 from nolabs-ai/bump-0110
• 36a06ba chore(release): bump version to 0.11.0
• af508f9 Merge pull request #92 from nolabs-ai/release-action
• e09b1a0 ci(publish): support reusable workflows for pypi
• 163fca0 Merge commit from fork
• 40ef554 Merge pull request #90 from always-further/migrationNolabs
• Additional commits viewable in compare view

[christophetd]

Tests pass, minor version bump.

[christophetd]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[christophetd]

@dependabot recreate