Merge pull request #275 from scientific-python/dependabot/github_actions/dot-github/workflows/actions-5da8da3d55

Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 in /.github/workflows in the actions group

Author: bsipocz

.github/workflows/publish.yml

@@ -46,7 +46,7 @@ jobs:
 
     - name: Publish distribution 📦 to PyPI
       if: startsWith(github.ref, 'refs/tags')
-      uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa  # v1.11.0
+      uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc  # v1.12.2
       with:
         user: __token__
         password: ${{ secrets.pypi_password }}