Update pypa/gh-action-pypi-publish action to v1.12.4 #355
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #355 +/- ##
=======================================
Coverage 99.35% 99.35%
=======================================
Files 5 5
Lines 309 309
=======================================
Hits 307 307
Misses 2 2 |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -56,7 +56,7 @@ | |||
| sed -i "s/5 - Production\/Stable/4 - Beta/g" setup.py | |||
| .venv/bin/python setup.py clean check sdist bdist_wheel | |||
| - name: Upload to PyPI Test | |||
| uses: pypa/[email protected].3 | |||
| uses: pypa/[email protected].4 | |||
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
| @@ -77,7 +77,7 @@ | |||
| .venv/bin/pip install wheel setuptools -r requirements.txt | |||
| .venv/bin/python setup.py clean check sdist bdist_wheel | |||
| - name: Upload to PyPI | |||
| uses: pypa/[email protected].3 | |||
| uses: pypa/[email protected].4 | |||
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
renovate
bot
force-pushed
the
renovate/pypa-gh-action-pypi-publish-1.x
branch
from
8aee852 to
2d7ba6a
Compare
This PR contains the following updates:
v1.12.3->v1.12.4Release Notes
pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)
v1.12.4Compare Source
Be nice to FOSS maintainers.
✨ What's Changed
The main theme of this patch release that the support for uploading PEP 639 licensing metadata to PyPI has been fixed in #327.
🛠️ Internal Updates
A few smaller updates include the attestation existence being checked earlier in the process now, listing all the violating files together, not just one (PR #315).
And the lock file with the software available in runtime has been re-pinned in #329.
Additionally, the CI now runs the smoke-tests against both Ubuntu 22.04 and 24.04 explicitly via
da900af.🪞 Full Diff: pypa/gh-action-pypi-publish@v1.12.3...v1.12.4
🧔♂️ Release Manager: @webknjaz 🇺🇦
🙏 Special Thanks to @dnicolodi💰 and @woodruffw💰 for releasing the license metadata support fix in Twine!
💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.
Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.