[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
danhellem/github-actions-issue-to-work-item	action	minor	v2.4 → v2.5
github/codeql-action	action	patch	v4.39.0 → v4.39.1	v4.39.3 (+1)
ni/python-actions	action	minor	v0.9.0 → v0.10
pypa/gh-action-pypi-publish	action	patch	v1.14.2 → v1.14.3

---

Release Notes

danhellem/github-actions-issue-to-work-item

v2.5: Release 2.5

Compare Source

What's Changed

• Bump @​octokit/request-error and @​actions/github by @​dependabot in #​150
• Updates to dependencies
• Updates to code to use new versions of octokit

Full Changelog: danhellem/github-actions-issue-to-work-item@v2.4...v2.5

github/codeql-action

v4.39.1

Compare Source

• Update default CodeQL bundle version to 2.27.3. #​4256

ni/python-actions

v0.10

Compare Source

pypa/gh-action-pypi-publish

v1.14.3

Compare Source

Keeping the community safe is a collaborative effort! 💛💙

[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #​427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

• https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576
• https://emudhra.we-have-a-problem.com

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #​420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

---

Configuration

📅 Schedule: (in timezone US/Central)

• Branch creation
  • Only on Sunday (* * * * 0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.