From d001e0bd4efb2c86f769c45184ffee6d40ec55c9 Mon Sep 17 00:00:00 2001 From: Zac Farrell Date: Sun, 8 Nov 2026 09:46:29 -0800 Subject: [PATCH 1/2] fix(ci): bump gh-action-pypi-publish to v1.14.3 --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f78f600..d89f191 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -106,7 +106,7 @@ jobs: # `twine check --strict` passes, because it pip-installs a current twine — # so the failure appears only at upload, after the tag is public. - name: Publish via Trusted Publishing - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 # Announce the release in #deploy. Runs only when the publish above # succeeded. Posts via the shared Hotdata CI Slack app (bot token), so the From 04798d0c84b33422ea120002c0c505ad0cb99471 Mon Sep 17 00:00:00 2001 From: Zac Farrell Date: Sun, 8 Nov 2026 09:48:07 -0800 Subject: [PATCH 2/2] fix(scripts): bump pypi-publish pin in workflow generator --- scripts/publish-workflow.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/publish-workflow.sh b/scripts/publish-workflow.sh index 713f872..589bbe8 100755 --- a/scripts/publish-workflow.sh +++ b/scripts/publish-workflow.sh @@ -71,5 +71,5 @@ jobs: path: dist/ - name: Publish via Trusted Publishing - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 EOF