search

KingsburyLab / pyEQL

A Python library for solution chemistry
Other
65 stars 17 forks source link

Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11 #85

Closed dependabot[bot] closed 9 months ago

dependabot[bot] commented 9 months ago

Bumps pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11.

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.8.11

:nail_care: Cosmetic output improvements

@​woodruffw added a nudge suggesting the users storing passwords in a GitHub Actions repository secrets to switch to using secretless publishing in pypa/gh-action-pypi-publish#190. This also reminds people that PyPI will start mandating two-factor authentication to perform uploads in 2024.

:memo: What's Documented

@​di linked the configuration docs for Trusted Publishing in README via pypa/gh-action-pypi-publish#179.

:hammer_and_wrench: Internal dependencies

:muscle: New Contributors

:mirror: Full Diff: https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.10...v1.8.11

Commits
  • 2f6f737 Merge commit PR #184 into unstable/v1
  • 2fa448a Merge PRs #190, #184, #185, #189 and #194 into unstable/v1
  • 824ad31 Revert flake8 to v4.0.1 for WPS
  • 41f3f53 Bump cryptography from 41.0.3 to 41.0.6 in /requirements
  • 2319287 twine-upload: ::error, switch nudge order
  • 254a0d4 twine-upload: add a nudge for password auth
  • 70a33ca Bump pip from 22.3.1 to 23.3 in /requirements
  • 102f507 Bump urllib3 from 2.0.6 to 2.0.7 in /requirements
  • 79739dc Merge pull request #183 from pypa/dependabot/pip/requirements/urllib3-2.0.6
  • 9a3f9ad [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
codecov[bot] commented 9 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (726c3b0) 80.31% compared to head (f4fe8d8) 80.31%.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #85 +/- ## ======================================= Coverage 80.31% 80.31% ======================================= Files 10 10 Lines 1448 1448 Branches 252 252 ======================================= Hits 1163 1163 Misses 250 250 Partials 35 35 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

dependabot[bot] commented 9 months ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.