Merge pull request #96 from matplotlib/dependabot/github_actions/actions-ef2de82c57

Bump the actions group across 1 directory with 3 updates

Author: dstansby

.github/workflows/release.yml

@@ -34,7 +34,7 @@ jobs:
         run: python -m build
 
       - name: Save built packages as artifact
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08  # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1  # v4.6.1
         with:
           name: packages-${{ runner.os }}-${{ steps.setup.outputs.python-version }}
           path: dist/
@@ -52,11 +52,11 @@ jobs:
       id-token: write
     steps:
       - name: Download packages
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16  # v4.1.8
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806  # v4.1.9
         with:
           pattern: packages-*
           path: dist
           merge-multiple: true
 
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70  # v1.12.3
+        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc  # v1.12.4