Merge pull request #420 from data-apis/dependabot/github_actions/actions-6ba9f7924b

Bump the actions group with 3 updates

Author: github-actions[bot]

.github/workflows/dependabot-auto-merge.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v2
+        uses: dependabot/fetch-metadata@v3
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Enable auto-merge for Dependabot PRs

.github/workflows/publish-package.yml

@@ -95,19 +95,19 @@ jobs:
    #   if: >-
    #     (github.event_name == 'push' && startsWith(github.ref, 'refs/tags'))
    #     || (github.event_name == 'workflow_dispatch' && github.event.inputs.publish == 'true')
-   #   uses: pypa/gh-action-pypi-publish@v1.13.0
+   #   uses: pypa/gh-action-pypi-publish@v1.14.0
    #   with:
    #     repository-url: https://test.pypi.org/legacy/
    #     print-hash: true
 
     - name: Publish distribution 📦 to PyPI
       if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
-      uses: pypa/gh-action-pypi-publish@v1.13.0
+      uses: pypa/gh-action-pypi-publish@v1.14.0
       with:
         print-hash: true
 
     - name: Create GitHub Release from a Tag
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@v3
       if: startsWith(github.ref, 'refs/tags/')
       with:
           files: dist/*