Update `pypi-publish` to latest release

Open albertocavalcante opened this issue 1 year ago • 2 comments

Stopped using commit hash in favor of tag release at https://github.com/marketplace/actions/pypi-publish

Jun 27 '24 09:06 albertocavalcante

@laramiel, can you please review it? Thanks.

Jul 03 '24 03:07 albertocavalcante

We are actually intentionally using the commit hash for third-party actions. Otherwise, since tags are mutable, it would effectively grant full control to the owner of the action.

Jul 03 '24 04:07 jbms

Updated using commit hash. Closing.

Jul 18 '24 22:07 laramiel

That makes sense. Thanks @jbms and @laramiel.

Jul 20 '24 05:07 albertocavalcante