This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) | action | patch | `v1.14.2` → `v1.14.3` | --- ### Release Notes <details> <summary>pypa/gh-action-pypi-publish</summary> ### [`v1.14.3`](https://redirect.github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.3) [Compare Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.14.2...v1.14.3) <p align="right"><i>Keeping the community safe is a collaborative effort! 💛💙</i></p> > \[!important] > 🚨 This release includes fixes for [GHSA-5xjx-3w67-w9x9](https://redirect.github.com/pypa/gh-action-pypi-publish/security/advisories/GHSA-5xjx-3w67-w9x9) patched up by [@sethmlarson](https://redirect.github.com/sethmlarson)[💰](https://redirect.github.com/sponsors/sethmlarson) in [#427](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/427) and in other places across the ecosystem. > > Additional ecosystem and related mitigations beyond you might want to watch out for: > > - <https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576> > - <https://emudhra.we-have-a-problem.com> ##### 🛠️ Security Tightening [@webknjaz](https://redirect.github.com/webknjaz)[💰](https://redirect.github.com/sponsors/webknjaz) made sure the dependency tree within the action runtime uses hash-checking from now on via [#420](https://redirect.github.com/pypa/gh-action-pypi-publish/pull/420). **🪞 Full Diff**: <pypa/gh-action-pypi-publish@v1.14.2...v1.14.3> **🧔‍♂️ Release Manager:** [@webknjaz](https://redirect.github.com/sponsors/webknjaz) [🇺🇦](https://stand-with-ukraine.pp.ua) **💬 Discuss** [on Bluesky 🦋](https://bsky.app/profile/webknjaz.me/post/3mydcjweyak2f), [on Mastodon 🐘](https://mastodon.social/@webknjaz/117474743338290807) and [on GitHub][release discussion]. [![GH Sponsors badge]][GH Sponsors URL] [release discussion]: https://redirect.github.com/pypa/gh-action-pypi-publish/discussions/429 [GH Sponsors badge]: https://img.shields.io/badge/%40webknjaz-transparent?logo=githubsponsors&logoColor=%23EA4AAA&label=Sponsor&color=2a313c [GH Sponsors URL]: https://redirect.github.com/sponsors/webknjaz </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
-Original file line number
+Diff line change
       - name: Build
         run: hatchling build
       - name: Push to PyPI
 -        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
 +        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
         with:
             attestations: true