Skip to content

Upgrade gh-action-pypi-publish to v1.14.3 - #37

Merged
jeancochrane merged 1 commit into
mainfrom
jeancochrane/upgrade-gh-action-pypi-publish-to-v1.14.3
Oct 22, 2026
Merged

jeancochrane merged 1 commit into
mainfrom
jeancochrane/upgrade-gh-action-pypi-publish-to-v1.14.3

Conversation

@jeancochrane

@jeancochrane jeancochrane commented Oct 21, 2026 •

Copy link
Copy Markdown
Member

We need to update gh-action-pypi-publish in order to pull in the patch for GHSA-5xjx-3w67-w9x9. See the release notes: https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.3.

I didn't actually test the change because I don't want to push a new version of the package to PyPI and our setup doesn't support pushing to the test environment. I think that's OK because this is a patch version upgrade, so in theory we shouldn't have to change the way we use the action at all.

@jeancochrane
jeancochrane marked this pull request as ready for review October 21, 2026 21:58
@jeancochrane
jeancochrane merged commit d44a409 into main Oct 22, 2026
11 checks passed
@jeancochrane
jeancochrane deleted the jeancochrane/upgrade-gh-action-pypi-publish-to-v1.14.3 branch October 22, 2026 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants