Bump twine from 5.1.1 to 6.0.1 #164
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
🛡️ Bandit Scan Results SummaryWe found 0 High, 0 Medium, and 0 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
Coverage report
This PR does not seem to contain any modification to coverable code. |
dependabot
bot
force-pushed
the
dependabot/pip/twine-6.0.1
branch
from
f45e012 to
80ba9d5
Compare
🛡️ Bandit Scan Results SummaryWe found 0 High, 0 Medium, and 0 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
dependabot
bot
force-pushed
the
dependabot/pip/twine-6.0.1
branch
from
80ba9d5 to
a50bc39
Compare
🛡️ Bandit Scan Results SummaryWe found 0 High, 0 Medium, and 0 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
Bumps [twine](https://github.com/pypa/twine) from 5.1.1 to 6.0.1. - [Release notes](https://github.com/pypa/twine/releases) - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst) - [Commits](pypa/twine@v5.1.1...6.0.1) --- updated-dependencies: - dependency-name: twine dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/pip/twine-6.0.1
branch
from
a50bc39 to
98cd10b
Compare
🛡️ Bandit Scan Results SummaryWe found 0 High, 0 Medium, and 0 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
Bumps twine from 5.1.1 to 6.0.1.
Changelog
Sourced from twine's changelog.
Commits
a723876Merge pull request #1189 from pypa/release-6.0.19a24828Update changelog for 6.0.1a017005Merge pull request #1188 from pypa/ww/fix-twine-check-globe98f03bcheck: fix handling of non-shell-expanded globs873f33ebuild(deps): bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#1175)067412eUse brackets for the default value of option arguments (#1149)f32dc35Apply ruff/Perflint rule (#1136)aa58273Don't require importlib_metadata on Python 3.10+675565fchangelog: record #118480cc58cchore: mark 3.13 as explicitly supportedDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)