This is an automated email from the ASF dual-hosted git repository. github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-4216-06a529d7dcb573375fa951603f491995421ef184 in repository https://gitbox.apache.org/repos/asf/iceberg-python.git
commit c207c14ec1de57bc52aa24e67b38462b8e688de3 Author: Alex Stephen <[email protected]> AuthorDate: Sat Oct 31 21:12:24 2026 +0000 Infra: Bump pypa/gh-action-pypi-publish to v1.14.3 (#4216) v1.14.2 is affected by GHSA-5xjx-3w67-w9x9, which zizmor's known-vulnerable-actions audit flags --- .github/workflows/nightly-pypi-build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nightly-pypi-build.yml b/.github/workflows/nightly-pypi-build.yml index 1acc6d0f1..bccdb77f5 100644 --- a/.github/workflows/nightly-pypi-build.yml +++ b/.github/workflows/nightly-pypi-build.yml @@ -88,7 +88,7 @@ jobs: - name: Publish to TestPyPI id: publish-testpypi continue-on-error: true - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 with: repository-url: https://test.pypi.org/legacy/ skip-existing: true
