This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-python.git
The following commit(s) were added to refs/heads/main by this push:
new c207c14ec Infra: Bump pypa/gh-action-pypi-publish to v1.14.3 (#4216)
c207c14ec is described below
commit c207c14ec1de57bc52aa24e67b38462b8e688de3
Author: Alex Stephen <[email protected]>
AuthorDate: Sat Oct 31 21:12:24 2026 +0000
Infra: Bump pypa/gh-action-pypi-publish to v1.14.3 (#4216)
v1.14.2 is affected by GHSA-5xjx-3w67-w9x9, which zizmor's
known-vulnerable-actions audit flags
---
.github/workflows/nightly-pypi-build.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/nightly-pypi-build.yml
b/.github/workflows/nightly-pypi-build.yml
index 1acc6d0f1..bccdb77f5 100644
--- a/.github/workflows/nightly-pypi-build.yml
+++ b/.github/workflows/nightly-pypi-build.yml
@@ -88,7 +88,7 @@ jobs:
- name: Publish to TestPyPI
id: publish-testpypi
continue-on-error: true
- uses:
pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+ uses:
pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
with:
repository-url: https://test.pypi.org/legacy/
skip-existing: true
