mirror of
https://github.com/kirill-markin/repo-to-text.git
synced 2026-11-05 07:53:23 -08:00
Remove compromised emSign trust from development and pip tooling
Require certifi 2026.10.19 for development dependencies and bootstrap pip 26.2.2 from its hash-verified official wheel in CI and Docker. Co-authored-by: Codex <codex@openai.com>
This commit is contained in:
parent
9a397eb6ee
commit
8054794c76
5 changed files with 11 additions and 17 deletions
2
.github/workflows/python-publish.yml
vendored
2
.github/workflows/python-publish.yml
vendored
|
|
@ -22,7 +22,7 @@ jobs:
|
|||
python-version: '3.14'
|
||||
- name: Install dependencies
|
||||
run: |
|
||||
python -m pip install --upgrade pip
|
||||
python -m pip install --upgrade "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
|
||||
pip install build
|
||||
- name: Build package
|
||||
run: python -m build
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue