What's Changed
- ci: declare workflow-level contents: read on 3 remaining workflows by @arpitjain099 in #1822
- Fix inject option parsing with --force before dependencies by @bubaizhanshen in #1820
- docs: fix self-managed ensurepath command by @EddieBSN in #1823
- chore(ci): restrict OIDC token to publish job by @facutuesca in #1826
- Add --no-path-check to skip the on-PATH check in pipx run by @findepi in #1825
- Add zizmor workflow and address findings by @facutuesca in #1827
- Fix release push auth with persist-credentials: false by @gaborbernat in #1828
New Contributors
- @arpitjain099 made their first contribution in #1822
- @bubaizhanshen made their first contribution in #1820
- @EddieBSN made their first contribution in #1823
- @facutuesca made their first contribution in #1826
- @findepi made their first contribution in #1825
Full Changelog: 1.13.0...1.14.0