From 47bc4b436ba7376ec61f219e7da5f2d14bf429a4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 18 Jun 2024 00:07:21 +0200
Subject: [PATCH] Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#187)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish)
from 1.8.14 to 1.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/gh-action-pypi-publish/releases">pypa/gh-action-pypi-publish's
releases</a>.</em></p>
<blockquote>
<h2>v1.9.0</h2>
<h2>💅 Cosmetic Output Improvements</h2>
<ul>
<li><a
href="https://github.com/woodruffw"><code>@​woodruffw</code></a><a
href="https://github.com/sponsors/woodruffw">💰</a> updated the tense on
password nudge in <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/234">#234</a></li>
<li><a
href="https://github.com/shenxianpeng"><code>@​shenxianpeng</code></a><a
href="https://github.com/sponsors/shenxianpeng">💰</a> helped us disable
the progress bar that was being produced by the <code>twine
upload</code> command via <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/231">#231</a></li>
<li><a
href="https://github.com/woodruffw"><code>@​woodruffw</code></a><a
href="https://github.com/sponsors/woodruffw">💰</a> also linked the PyPI
status dashboard in the trusted publishing error message via <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/pull/243">pypa/gh-action-pypi-publish#243</a></li>
</ul>
<h2>🛠️ Internal Dependencies</h2>
<ul>
<li>pre-commit linters got auto-updated @ <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/225">#225</a></li>
<li>some notable dependency bumps include
<ul>
<li><code>cryptography == 42.0.7</code></li>
<li><code>id == 1.4.0</code></li>
<li><code>idna == 3.7</code> via <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/228">#228</a></li>
<li><code>requests == 2.32.0</code> via <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/240">#240</a></li>
<li><code>Twine == 5.1.0</code></li>
</ul>
</li>
</ul>
<h2>⚙️ Secret Stuff</h2>
<p>In <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/241">#241</a>,
<a
href="https://github.com/br3ndonland"><code>@​br3ndonland</code></a><a
href="https://github.com/sponsors/br3ndonland">💰</a> added a Docker
label linking the container image to this repository for GHCR to display
it nicely. This is preparatory work for a big performance-focused
refactoring he's working on in <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/230">#230</a>.</p>
<h2>💪 New Contributors</h2>
<ul>
<li><a
href="https://github.com/shenxianpeng"><code>@​shenxianpeng</code></a>
made their first contribution in <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/pull/231">pypa/gh-action-pypi-publish#231</a></li>
<li><a
href="https://github.com/br3ndonland"><code>@​br3ndonland</code></a>
made their first contribution in <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/pull/241">pypa/gh-action-pypi-publish#241</a></li>
</ul>
<p><strong>🪞 Full Diff</strong>: <a
href="https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.14...v1.9.0">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.14...v1.9.0</a></p>
<p><strong>🧔‍♂️ Release Manager:</strong> <a
href="https://github.com/sponsors/webknjaz"><code>@​webknjaz
🇺🇦</code></a></p>
<p><strong>🙏 Special Thanks</strong> to <a
href="https://github.com/pradyunsg"><code>@​pradyunsg</code></a><a
href="https://github.com/sponsors/pradyunsg">💰</a> for promptly
unblocking this release to Marketplace as GitHub started asking for yet
another developer agreement signature from the organization admins.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0"><code>ec4db0b</code></a>
Merge PR <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/243">#243</a>
into unstable/v1</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/e7908444c66f5eb9b434207e3ecfef975ea3294e"><code>e790844</code></a>
oidc-exchange: link to status dashboard</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/87b624f8716b1150d93f45fa364e49eceebf3ffd"><code>87b624f</code></a>
💅Update homepage @ Dockerfile to GH Marketplace</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/da2f9bb91e4befc116f611d2977e267bfc852706"><code>da2f9bb</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/241">#241</a>
from br3ndonland/ghcr-label</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/abbea2dd5c5802d41c4b6d88c355c64e10207278"><code>abbea2d</code></a>
Add Docker label for GHCR</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/2734d07314198e3efbc2a559db0dd8ee41311611"><code>2734d07</code></a>
build(deps): bump requests from 2.31.0 to 2.32.0 in /requirements (<a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/240">#240</a>)</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/a54b9b8952a40829f62ac2bc7855f676d46f9738"><code>a54b9b8</code></a>
---</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/699cd6103f50bf5c3b2f070c70712d109c168e6c"><code>699cd61</code></a>
⇪📦 Bump the runtime dep lockfile</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/8414fc245772bb111cb480a62446d4bdfff3ddb0"><code>8414fc2</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/pypa/gh-action-pypi-publish/issues/225">#225</a>)</li>
<li><a
href="https://github.com/pypa/gh-action-pypi-publish/commit/67a07ebbede58a32f17e8cae6b08094c1f2a5c95"><code>67a07eb</code></a>
Disable the progress bar when running <code>twine upload</code></li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.14...v1.9.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.14&new-version=1.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/publish-to-pypi.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
index da05f41..68dfb92 100644
--- a/.github/workflows/publish-to-pypi.yml
+++ b/.github/workflows/publish-to-pypi.yml
@@ -39,7 +39,7 @@ jobs:
         run: >-
           python3 -m build
       - name: Publish release to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.8.14
+        uses: pypa/gh-action-pypi-publish@v1.9.0
         with:
           user: __token__
           password: ${{ secrets.PYPI_TOKEN }}