Skip to content

Commit 35b7f75

Browse files
authored
Update pypi-publish GitHub Action to v1.13.0 (#578)
Update the version of `gh-action-pypi-publish` used in our workflows since the last version (v1.12.4) has a known vulnerability discovered by Zizmor.
1 parent 7346a35 commit 35b7f75

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

.github/workflows/pypi.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -115,7 +115,7 @@ jobs:
115115
- name: Publish to Test PyPI
116116
# Only publish to TestPyPI when a PR is merged (pushed to main)
117117
if: success() && github.event_name == 'push'
118-
uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc
118+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
119119
with:
120120
repository_url: https://test.pypi.org/legacy/
121121
# Allow existing releases on test PyPI without errors.
@@ -125,4 +125,4 @@ jobs:
125125
- name: Publish to PyPI
126126
# Only publish to PyPI when a release triggers the build
127127
if: success() && github.event_name == 'release'
128-
uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc
128+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e

0 commit comments

Comments
 (0)