Skip to content

chore(github-actions): update pypa/gh-action-pypi-publish action to v1.14.3 - #101

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/pypa-gh-action-pypi-publish-1.x
Oct 23, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/pypa-gh-action-pypi-publish-1.x

Conversation

@renovate

@renovate renovate Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
pypa/gh-action-pypi-publish action patch v1.14.2 → v1.14.3

Release Notes

pypa/gh-action-pypi-publish

v1.14.3

Compare Source

Keeping the community safe is a collaborative effort! 💛💙

[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #​427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #​420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added bot-renovate Renovate dependency update renovate-type-cicd CI/CD pipeline dependency update renovate-version-patch Patch version update labels Oct 23, 2026
@renovate
renovate Bot enabled auto-merge (squash) October 23, 2026 20:34
@renovate
renovate Bot merged commit 5fb9b96 into main Oct 23, 2026
12 checks passed
@renovate
renovate Bot deleted the renovate/pypa-gh-action-pypi-publish-1.x branch October 23, 2026 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bot-renovate Renovate dependency update renovate-type-cicd CI/CD pipeline dependency update renovate-version-patch Patch version update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants