Update pypa/gh-action-pypi-publish action to v1.10.2 #334
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #334 +/- ##
=======================================
Coverage 99.64% 99.64%
=======================================
Files 4 4
Lines 279 279
=======================================
Hits 278 278
Misses 1 1 |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -55,7 +55,7 @@ | |||
| sed -i "s/5 - Production\/Stable/4 - Beta/g" setup.py | |||
| python setup.py clean check sdist bdist_wheel | |||
| - name: Upload to PyPI Test | |||
| uses: pypa/[email protected].1 | |||
| uses: pypa/[email protected].2 | |||
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
| @@ -75,7 +75,7 @@ | |||
| pip install wheel -r requirements.txt | |||
| python setup.py clean check sdist bdist_wheel | |||
| - name: Upload to PyPI | |||
| uses: pypa/[email protected].1 | |||
| uses: pypa/[email protected].2 | |||
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
renovate
bot
force-pushed
the
renovate/pypa-gh-action-pypi-publish-1.x
branch
from
64052a6 to
c6267e8
Compare
This PR contains the following updates:
v1.10.1->v1.10.2Release Notes
pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)
v1.10.2Compare Source
💅 Cosmetic Output Improvements
In #250 and #258, @facutuesca💰 added a nudge message with a magic link to pre-fill the creation of new Trusted Publishers configurations on PyPI. The users are now suggested to configure tokenless publishing by clicking a link printed in the job summary when it's detected that they publish to PyPI or TestPyPI. Just like magic! 🦄
🛠️ Internal Dependencies
@woodruffw💰 bumped
pypi-attestationsto v0.0.12 in #262,hopefully fixing #263. 🤞Nah.. that wasn't it.💪 New Contributors
@facutuesca made their first contribution in https://github.com/pypa/gh-action-pypi-publish/pull/258
🪞 Full Diff: pypa/gh-action-pypi-publish@v1.10.1...v1.10.2
🧔♂️ Release Manager: @webknjaz 🇺🇦
🙏 Special Thanks to @henryiii💰 for promptly pointing up possible fixes for #263.
Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.