Skip to content

chore(deps): update pypa/gh-action-pypi-publish action to v1.14.3 - #59

Merged
ReenigneArcher merged 1 commit into
masterfrom
renovate/pypa-gh-action-pypi-publish-1-x
Oct 27, 2026
Merged

ReenigneArcher merged 1 commit into
masterfrom
renovate/pypa-gh-action-pypi-publish-1-x

Conversation

@renovate

@renovate renovate Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
pypa/gh-action-pypi-publish action patch v1.14.2 → v1.14.3

Release Notes

pypa/gh-action-pypi-publish

v1.14.3

Compare Source

Keeping the community safe is a collaborative effort! 💛💙

[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #​427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #​420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 1am and before 8am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added ci dependencies Pull requests that update a dependency file labels Oct 23, 2026
@sonarqubecloud

Copy link
Copy Markdown

@codecov

codecov Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.17%. Comparing base (f9f9e21) to head (f401da7).
✅ All tests successful. No failed tests found.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #59   +/-   ##
=======================================
  Coverage   93.17%   93.17%           
=======================================
  Files          12       12           
  Lines        1993     1993           
  Branches       69       69           
=======================================
  Hits         1857     1857           
  Misses        136      136           
Flag Coverage Δ
Linux-python-3.11 92.74% <ø> (ø)
Linux-python-3.14 92.74% <ø> (ø)
Windows-python-3.11 92.90% <ø> (ø)
Windows-python-3.14 92.90% <ø> (ø)
macOS-python-3.11 92.74% <ø> (ø)
macOS-python-3.14 92.74% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f9f9e21...f401da7. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ReenigneArcher
ReenigneArcher merged commit 23690d2 into master Oct 27, 2026
32 checks passed
@ReenigneArcher
ReenigneArcher deleted the renovate/pypa-gh-action-pypi-publish-1-x branch October 27, 2026 03:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant