chore(deps): update workflows

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v4.1.6 -> v4.1.7
github/codeql-action	action	patch	v2.25.8 -> v2.25.11
pypa/gh-action-pypi-publish	action	minor	v1.8.14 -> v1.9.0

---

Release Notes

actions/checkout (actions/checkout)

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

github/codeql-action (github/codeql-action)

v2.25.11

Compare Source

v2.25.10

Compare Source

v2.25.9

Compare Source

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

v1.9.0

Compare Source

💅 Cosmetic Output Improvements

• @​woodruffw💰 updated the tense on password nudge in #​234
• @​shenxianpeng💰 helped us disable the progress bar that was being produced by the twine upload command via #​231
• @​woodruffw💰 also linked the PyPI status dashboard in the trusted publishing error message via https://github.com/pypa/gh-action-pypi-publish/pull/243

🛠️ Internal Dependencies

• pre-commit linters got auto-updated @​ #​225
• some notable dependency bumps include
  • cryptography == 42.0.7
  • id == 1.4.0
  • idna == 3.7 via #​228
  • requests == 2.32.0 via #​240
  • Twine == 5.1.0

⚙️ Secret Stuff

In #​241, @​br3ndonland💰 added a Docker label linking the container image to this repository for GHCR to display it nicely. This is preparatory work for a big performance-focused refactoring he's working on in #​230.

💪 New Contributors

• @​shenxianpeng made their first contribution in https://github.com/pypa/gh-action-pypi-publish/pull/231
• @​br3ndonland made their first contribution in https://github.com/pypa/gh-action-pypi-publish/pull/241

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.14...v1.9.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​pradyunsg💰 for promptly unblocking this release to Marketplace as GitHub started asking for yet another developer agreement signature from the organization admins.

---

Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[forking-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.