Skip to content

fix(ci): inline the PyPI publish step instead of a composite action - #141

Merged
jimisola merged 2 commits into
mainfrom
fix/pypi-publish-not-nested-in-composite
Aug 23, 2026
Merged

fix(ci): inline the PyPI publish step instead of a composite action#141
jimisola merged 2 commits into
mainfrom
fix/pypi-publish-not-nested-in-composite

refactor(ci): use download-dists for the artifact half

d38a86e
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Aug 23, 2026 in 1s

1 new alert including 1 medium severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 112 in .github/workflows/release.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow or composite action Medium

Unpinned 3rd party Action 'Release' step
Uses Step
uses 'reqstool/.github/.github/actions/download-dists' with ref 'main', not a pinned commit hash