Skip to content

ci: Bump gh-action-pypi-publish to 1.14.2 and pin actions for Zizmor compliance - #349

Merged
copybara-service[bot] merged 1 commit into
mainfrom
test_987624729
Sep 24, 2026
Merged

ci: Bump gh-action-pypi-publish to 1.14.2 and pin actions for Zizmor compliance#349
copybara-service[bot] merged 1 commit into
mainfrom
test_987624729

Conversation

@copybara-service

@copybara-service copybara-service Bot commented Sep 24, 2026 •
edited
Loading

Copy link
Copy Markdown

ci: Bump gh-action-pypi-publish to 1.14.2 and pin actions for Zizmor compliance

  • Bump pypa/gh-action-pypi-publish to v1.14.2 to support Core Metadata 2.5 (PEP 794) and prevent twine metadata verification failures.
  • Pin GitHub Actions to immutable commit SHAs across release workflows to satisfy Zizmor security scanning.
@copybara-service copybara-service Bot changed the title ci: Bump gh-action-pypi-publish to 1.14.2 for Core Metadata 2.5 support Sep 24, 2026
@copybara-service
copybara-service Bot force-pushed the test_987624729 branch 2 times, most recently from dbde0da to cb7767b Compare September 24, 2026 19:43
@jdbcode
ci: Bump gh-action-pypi-publish to 1.14.2 and pin actions for Zizmor …
0d7c6a3 
…compliance

- Bump pypa/gh-action-pypi-publish to v1.14.2 to support Core Metadata 2.5 (PEP 794) and prevent twine metadata verification failures.
- Pin GitHub Actions to immutable commit SHAs across release workflows to satisfy Zizmor security scanning.

PiperOrigin-RevId: 987691704
@copybara-service
copybara-service Bot merged commit 0d7c6a3 into main Sep 24, 2026
2 checks passed
@copybara-service
copybara-service Bot deleted the test_987624729 branch September 24, 2026 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant

@jdbcode