v1.14.3

[webknjaz]

Keeping the community safe is a collaborative effort! 💛💙

Important

🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @sethmlarson💰 in #427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

• https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576
• https://emudhra.we-have-a-problem.com

🛠️ Security Tightening

@webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #420.

🪞 Full Diff: v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋 and on Mastodon 🐘.

---

This discussion was created from the release v1.14.3.

[generalmimon]

This release includes fixes for GHSA-5xjx-3w67-w9x9

Is this advisory GHSA-5xjx-3w67-w9x9 supposed to be publicly available? It is not currently (try visiting GHSA-5xjx-3w67-w9x9 in Incognito mode).

[webknjaz]

It's still in draft because I didn't have time to fill it out. It's mostly for dependabot to push the notifications through the ecosystem. But it's effectively https://emudhra.we-have-a-problem.com/.

[webknjaz]

I've just made it public.