#3845 chore(deps): update minor and patch updates to github actions Pull request opened by renovate[bot] This PR contains the following updates: | Package | Type | Update | Change | | ------------------------------------------------------------------------------------------------------------ | ------ | ------ | ----------------- | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | v4.39.0 → v4.39.1 | | [hynek/build-and-inspect-python-package](https://redirect.github.com/hynek/build-and-inspect-python-package) | action | patch | v3.0.1 → v3.0.2 | | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) | action | patch | v1.14.2 → v1.14.3 | --- Release Notes github/codeql-action `v4.39.1` Compare Source • Update default CodeQL bundle version to 2.27.3. #​4256 hynek/build-and-inspect-python-package `v3.0.2` Compare Source This is a pure security dependency update brought to you by the number 4. pypa/gh-action-pypi-publish `v1.14.3` Compare Source _Keeping the community safe is a collaborative effort! 💛💙_

[!important]

🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson:moneybag: in #​427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

• https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

• https://emudhra.we-have-a-problem.com

🛠️ Security Tightening @​webknjaz:moneybag: made sure the dependency tree within the action runtime uses hash-checking from now on via #​420. 🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3 🧔‍♂️ Release Manager: @​webknjaz :flag-ua: 💬 Discuss on Bluesky :butterfly:, on Mastodon :elephant: and on GitHub. GH Sponsors badge --- Configuration 📅 Schedule: (UTC) • Branch creation • Between 12:00 AM and 03:59 AM, only on Monday (

* 0-3 * * 1

) • Automerge • Between 08:00 AM and 05:59 PM, Monday through Friday (

* 8-17 * * 1-5

) 🚦 Automerge: Enabled. ♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. --- • If you want to rebase/retry this PR, check this box --- This PR was generated by Mend Renovate. View the repository job log. meltano/sdk