remove slsa provenance (#300)

PyPI and trusted publishing has built-in attestation support now.

.github/workflows/publish.yaml

@@ -6,8 +6,6 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
-    outputs:
-      hash: ${{ steps.hash.outputs.hash }}
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
@@ -19,27 +17,11 @@ jobs:
       # Use the commit date instead of the current date during the build.
       - run: echo "SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV
       - run: python -m build
-      # Generate hashes used for provenance.
-      - name: generate hash
-        id: hash
-        run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
       - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           path: ./dist
-  provenance:
-    needs: [build]
-    permissions:
-      actions: read
-      id-token: write
-      contents: write
-    # Can't pin with hash due to how this workflow works.
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
-    with:
-      base64-subjects: ${{ needs.build.outputs.hash }}
   create-release:
-    # Upload the sdist, wheels, and provenance to a GitHub release. They remain
-    # available as build artifacts for a while as well.
-    needs: [provenance]
+    needs: [build]
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -48,12 +30,11 @@ jobs:
       - name: create release
         run: >
           gh release create --draft --repo ${{ github.repository }}
-          ${{ github.ref_name }}
-          *.intoto.jsonl/* artifact/*
+          ${{ github.ref_name }} artifact/*
         env:
           GH_TOKEN: ${{ github.token }}
   publish-pypi:
-    needs: [provenance]
+    needs: [build]
     # Wait for approval before attempting to upload to PyPI. This allows reviewing the
     # files in the draft release.
     environment:

requirements/build.txt

@@ -4,7 +4,7 @@
 #
 #    pip-compile build.in
 #
-build==1.2.2.post1
+build==1.2.2
     # via -r build.in
 importlib-metadata==7.1.0
     # via build

requirements/dev.txt

@@ -108,7 +108,7 @@ markupsafe==2.1.5
     #   -r typing.txt
     #   jinja2
     #   werkzeug
-mypy==1.13.0
+mypy==1.11.2
     # via -r typing.txt
 mypy-extensions==1.0.0
     # via
@@ -129,7 +129,7 @@ packaging==24.0
     #   pytest
     #   sphinx
     #   tox
-pallets-sphinx-themes==2.3.0
+pallets-sphinx-themes==2.1.3
     # via -r docs.txt
 platformdirs==4.2.1
     # via
@@ -150,7 +150,7 @@ pygments==2.18.0
     #   sphinx
 pyproject-api==1.6.1
     # via tox
-pyright==1.1.389
+pyright==1.1.382.post1
     # via -r typing.txt
 pytest==8.3.3
     # via
@@ -174,12 +174,7 @@ sphinx==7.1.2
     # via
     #   -r docs.txt
     #   pallets-sphinx-themes
-    #   sphinx-notfound-page
     #   sphinxcontrib-log-cabinet
-sphinx-notfound-page==1.0.4
-    # via
-    #   -r docs.txt
-    #   pallets-sphinx-themes
 sphinxcontrib-applehelp==1.0.4
     # via
     #   -r docs.txt

requirements/docs.txt

@@ -28,7 +28,7 @@ packaging==24.0
     # via
     #   pallets-sphinx-themes
     #   sphinx
-pallets-sphinx-themes==2.3.0
+pallets-sphinx-themes==2.1.3
     # via -r docs.in
 pygments==2.18.0
     # via sphinx
@@ -42,10 +42,7 @@ sphinx==7.1.2
     # via
     #   -r docs.in
     #   pallets-sphinx-themes
-    #   sphinx-notfound-page
     #   sphinxcontrib-log-cabinet
-sphinx-notfound-page==1.0.4
-    # via pallets-sphinx-themes
 sphinxcontrib-applehelp==1.0.4
     # via sphinx
 sphinxcontrib-devhelp==1.0.2

requirements/typing.txt

@@ -28,7 +28,7 @@ markupsafe==2.1.5
     # via
     #   jinja2
     #   werkzeug
-mypy==1.13.0
+mypy==1.11.2
     # via -r typing.in
 mypy-extensions==1.0.0
     # via mypy
@@ -38,7 +38,7 @@ packaging==24.0
     # via pytest
 pluggy==1.5.0
     # via pytest
-pyright==1.1.389
+pyright==1.1.382.post1
     # via -r typing.in
 pytest==8.3.3
     # via -r typing.in

src/flask_debugtoolbar/panels/profiler.py

@@ -36,6 +36,8 @@ class ProfilerDebugPanel(DebugPanel):
     ) -> None:
         super().__init__(jinja_env, context=context)
 
+        self.dump_filename = None
+
         if current_app.config.get("DEBUG_TB_PROFILER_ENABLED"):
             self.is_active = True
             self.dump_filename = current_app.config.get(