[bokelley]

Summary

GHSA-5xjx-3w67-w9x9, published 2026-10-30, covers pypa/gh-action-pypi-publish up to 1.14.2: the CA chain that Sigstore uses for Trusted Publishing and PyPI attestations was revoked. Since it was published, zizmor's known-vulnerability audit fails the Workflow security job on every branch, next included (release-publish.yml:118: action has a known vulnerability).

This pins release-publish.yml to v1.14.3, the first patched release, by its commit (7245906fb61fa33a13554f9d5fb856fe61758086, which the annotated tag v1.14.3 points to). Nothing else changes.

The reporting-subscriptions stack (#1739 and up) carries the same one-line commit so its CI is green. The two are identical, so they merge cleanly.

main has the same pin and needs the same change.

🤖 Generated with Claude Code

[aao-secretariat]

Ladon verdict: Approve

Approve — CI dependency security pin.

This PR makes a single one-line change to .github/workflows/release-publish.yml, repinning pypa/gh-action-pypi-publish from v1.13.0 to v1.14.3 (addressing GHSA-5xjx-3w67-w9x9, a revoked CA chain affecting ≤1.14.2). The action is SHA-pinned with a version comment — the correct and secure shape. No code changes, no public-surface changes, no generated-code edits, no type-layering impact.

Checks applied:

• No critical/high findings (row 1 N/A).
• gated_paths: false (row 2 N/A).
• high_risk: false; no deletions/modifications triggers (rows 3–5 N/A).
• No prior decision (row 6 N/A).
• No no-auto-approve team match (row 7 N/A).
• Zero medium findings (row 8 N/A).
• Falls through to row 9 → approve.

The reviewer could not independently confirm the SHA resolves to the v1.14.3 tag (network fetches blocked), but the commit message and PR body are specific and consistent. This is a mechanical, safe security pin.

[aao-secretariat]

Ladon verdict: Approve

Approve — single-line security bump in release-publish.yml with no actionable findings.

This PR bumps pypa/gh-action-pypi-publish from v1.13.0 to v1.14.3 — the first release patched for GHSA-5xjx-3w67-w9x9 (revoked Sigstore CA chain) — SHA-pinned to 7245906 with the version in a trailing comment, matching the existing pinning pattern. Trusted Publishing and attestations stay intact. No code paths or public surface touched.

Gate checks:

• No critical/high/medium findings (rows 1, 4–8 do not fire).
• gated_paths: false; review_decision: APPROVED (row 2 n/a).
• high_risk: false, no deletions (rows 3, 5 n/a).
• Prior decision was approve, not escalate (row 6 n/a).
• No no-auto-approve team match (row 7 n/a).

Falls through to row 9 → approve.