Title: build(deps): bump pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3 by dependabot[bot] · Pull Request #754 · linode/linode_api4-python · GitHub
Open Graph Title: build(deps): bump pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3 by dependabot[bot] · Pull Request #754 · linode/linode_api4-python
X Title: build(deps): bump pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3 by dependabot[bot] · Pull Request #754 · linode/linode_api4-python
Description: Bumps pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3.
Release notes
Sourced from pypa/gh-action-pypi-publish's releases.
v1.14.3
[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @sethmlarson💰 in #427 and in other places across the ecosystem.
Additional ecosystem and related mitigations beyond you might want to watch out for:
https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576
https://emudhra.we-have-a-problem.com
🛠️ Security Tightening
@webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via pypa/gh-action-pypi-publish#420.
🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3
🧔♂️ Release Manager: @webknjaz 🇺🇦
💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.
Commits
7245906 Merge pull request #427 from sethmlarson/certifi-sigstore
331eccb Upgrade certifi and sigstore
f68fee4 💰 Sync the FUNDING config
c0d6f8e Merge branch 'integrity/runtime/deptree' into unstable/v1
9090099 🧪 Make smoke test deps hash-pinned in CI
34e40c2 📌 Bump pip-tools managed transitive deptrees
e800ed5 👷 Enable hash-checking in the runtime deptree 🔗
dd8c5f4 🔧 Make pip-tools config available in container
See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show
Open Graph Description: Bumps pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3. Release notes Sourced from pypa/gh-action-pypi-publish's releases. v1.14.3 [!important] 🚨 This release includes fixes for GHSA-5xjx-...
X Description: Bumps pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3. Release notes Sourced from pypa/gh-action-pypi-publish's releases. v1.14.3 [!important] 🚨 This release includes fixes for GHSA-5...
Opengraph URL: https://github.com/linode/linode_api4-python/pull/754
X: @github
Domain: github.com
| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:a27322fc-5ca8-2643-cb39-5dfea2c0c8e7 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | A624:135D99:71D3A2:9F7036:6AF9CA37 |
| html-safe-nonce | 49ed5725962333ea1f2e2b56faf80f25349dd4848783e5b30b52290425951357 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBNjI0OjEzNUQ5OTo3MUQzQTI6OUY3MDM2OjZBRjlDQTM3IiwidmlzaXRvcl9pZCI6Ijc4NjYwNjg5OTE5MzQ1ODEzMDMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | a6129b982d80ab87c6b1fc828aa412c95e09edb0d71e36b0a2781bb0047852c1 |
| hovercard-subject-tag | pull_request:5022021295 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/linode/linode_api4-python/pull/754/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3. Release notes Sourced from pypa/gh-action-pypi-publish's releases. v1.14.3 [!important] 🚨 This release includes fixes for GHSA-5xjx-... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 612d3e6ffd693e7ea8d9fcf452370995872baef31d825b1fedef704cd3d24ac7 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/linode/linode_api4-python git https://github.com/linode/linode_api4-python.git |
| octolytics-dimension-user_id | 5184305 |
| octolytics-dimension-user_login | linode |
| octolytics-dimension-repository_id | 55797611 |
| octolytics-dimension-repository_nwo | linode/linode_api4-python |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 55797611 |
| octolytics-dimension-repository_network_root_nwo | linode/linode_api4-python |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 072e34035c13c31543fba9f025cbbbda4210dae4 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width