Secret credential stored in public repository

[Mark-Hetherington]

I'm not completely familiar with Travis for CI, but it seems like a credential to deploy to pypi might be exposed here?

gcsfs/.travis.yml

Line 20 in c219b9c

secure: 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

[leberknecht]

https://docs.travis-ci.com/user/encryption-keys/
Its not the key, its encrypted data that gets decrypted on travis. Aka "its ok to have that here"

..which is a pity, i somehow wished it would have been some key so we can bump requests package to a version thats not affected by CVE-2023-43804 ..maybe someone wants to fork and maintain this.. 🤷