Skip to content

chore(deps): update pypa/gh-action-pypi-publish action to v1.14.3 - #382

Merged
dreadnode-renovate-bot[bot] merged 1 commit into
mainfrom
renovate/pypa-gh-action-pypi-publish-1.x
Oct 21, 2026
Merged

dreadnode-renovate-bot[bot] merged 1 commit into
mainfrom
renovate/pypa-gh-action-pypi-publish-1.x

Conversation

@dreadnode-renovate-bot

@dreadnode-renovate-bot dreadnode-renovate-bot Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

| Package | Type | Update | Change |
|

Generated Summary:

  • Updated the PyPI publish action to version v1.14.3.
  • This change addresses potential bugs and improvements from the previous version v1.14.2.
  • No alterations were made to the workflow logic, ensuring the process remains consistent.

This summary was generated with ❤️ by rigging

| pypa/gh-action-pypi-publish | action | patch | v1.14.2 → v1.14.3 |


Release Notes

pypa/gh-action-pypi-publish

v1.14.3

Compare Source

[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #​427 and in other places across the ecosystem.

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #​420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

| datasource  | package                     | from    | to      |
| ----------- | --------------------------- | ------- | ------- |
| github-tags | pypa/gh-action-pypi-publish | v1.14.2 | v1.14.3 |
@dreadnode-renovate-bot dreadnode-renovate-bot Bot added area/github Changes made to GitHub Actions type/digest Dependency digest updates labels Oct 21, 2026
@dreadnode-renovate-bot
dreadnode-renovate-bot Bot added this pull request to the merge queue Oct 21, 2026
Merged via the queue into main with commit 7be60a6 Oct 21, 2026
9 checks passed
@dreadnode-renovate-bot
dreadnode-renovate-bot Bot deleted the renovate/pypa-gh-action-pypi-publish-1.x branch October 21, 2026 00:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/github Changes made to GitHub Actions type/digest Dependency digest updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants