Skip to content

Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 - #411

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.0
Open

Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0#411
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 10, 2026

Copy link
Copy Markdown
Contributor

Bumps pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0.

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.14.0

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @​whitequark💰 in #397.

📝 Docs

@​woodruffw💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #388 and @​him2him2💰 brushed up some grammar in the README and SECURITY docs via #395.

🛠️ Internal Updates

@​woodruffw💰 bumped sigstore and pypi-attestations in the lock file (#391) and @​webknjaz💰 added infra for using type annotations in the project (#381).

💪 New Contributors

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​facutuesca💰 and @​woodruffw💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge

Commits
  • cef2210 Merge pull request #397 from whitequark/patch-1
  • b4595e2 Enable verbose and print-hash by default.
  • e2bab26 Merge pull request #395 from him2him2/docs/fix-typos-and-grammar
  • 7495c38 docs: fix typos and grammar in README and SECURITY
  • 03f86fe Merge pull request #388 from woodruffw-forks/ww/rm-experimental
  • 4c78f1c Merge branch 'unstable/v1' into ww/rm-experimental
  • b5a6e8b deps: bump sigstore and pypi-attestations
  • a48a03e remove another experimental mention
  • 8087a88 action: remove a lingering mention of PEP 740 being experimental
  • 3317ede 🧪 Integrate actionlint via pre-commit framework
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.13.0...v1.14.0)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Apr 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 10, 2026 16:02
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Apr 10, 2026
@greptile-apps

greptile-apps Bot commented Apr 10, 2026

Copy link
Copy Markdown

Greptile Summary

This PR bumps pypa/gh-action-pypi-publish from v1.13.0 to v1.14.0 in the publish step of .github/workflows/test.yml. The change is a single-line version bump with no other modifications.

Confidence Score: 5/5

This PR is safe to merge — it is a routine, backward-compatible dependency bump from an official PyPA action.

The change is a single-line version bump of a well-maintained, official PyPA GitHub Action. v1.14.0 is backward-compatible (it only enables verbose and print-hash by default) and the existing explicit print-hash: true continues to work correctly.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/test.yml Single-line version bump of pypa/gh-action-pypi-publish from v1.13.0 to v1.14.0; no logic changes.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Actions
    participant Build as uv build
    participant PyPI as pypa/gh-action-pypi-publish@v1.14.0

    GH->>Build: Run uv build
    Build-->>GH: dist/ artifacts
    GH->>PyPI: Publish package (print-hash=true, attestations=true)
    PyPI-->>GH: Upload complete
Loading

Reviews (1): Last reviewed commit: "Bump pypa/gh-action-pypi-publish from 1...." | Re-trigger Greptile

@codecov

codecov Bot commented Apr 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 60.19%. Comparing base (fa9f91d) to head (cfe7a9b).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #411   +/-   ##
=======================================
  Coverage   60.19%   60.19%           
=======================================
  Files          30       30           
  Lines        1570     1570           
  Branches      215      215           
=======================================
  Hits          945      945           
  Misses        605      605           
  Partials       20       20           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants