AdamOswald / tes

2 stars 1 forks source link

Update pypa/gh-action-pypi-publish digest to 5a085bf #133

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
pypa/gh-action-pypi-publish action digest f47b347 -> 5a085bf

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

viezly[bot] commented 1 year ago

Pull request by bot. No need to analyze

performance-testing-bot[bot] commented 1 year ago

Unable to locate .performanceTestingBot config file

guide-bot[bot] commented 1 year ago

Thanks for opening this Pull Request! We need you to:

  1. Fill out the description.

    Action: Edit description and replace <!- ... --> with actual values.

  2. Complete the activities.

    Action: Complete If you want to rebase/retry this PR, check this box

    If an activity is not applicable, use '\~activity description\~' to mark it not applicable.

difflens[bot] commented 1 year ago

View changes in DiffLens

senior-dev-bot[bot] commented 1 year ago

Senior-Dev Bot :robot:

Diff 1:

The code changes look good, but it would be best to ensure that the latest version of the pypa/gh-action-pypi-publish action is being used. It's also important to make sure that sensitive information like the PyPI API token is being securely stored and accessed. One way to do this is by using GitHub secrets.

Code example:

-      uses: pypa/gh-action-pypi-publish@f47b34707fd264d5ddb1ef322ca74cf8e4cf351b
+      uses: pypa/gh-action-pypi-publish@latest
       with:
         user: __token__
         password: ${{ secrets.PYPI_API_TOKEN }}
# Store PyPI API token as a secret in GitHub
env:
  PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}