Merge pull request #261 from atsign-foundation/dependabot/github_acti…

…ons/github-actions-92cd5b737a

build(deps): Bump pypa/gh-action-pypi-publish from 1.10.0 to 1.10.1 in the github-actions group

.github/workflows/build-publish.yml

@@ -61,9 +61,10 @@ jobs:
  name: python-package-distributions
  path: dist/
  - name: Publish distribution to TestPyPI
- uses: pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6 # v1.10.0
+ uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1
  with:
  skip-existing: true
+ attestations: true
  repository-url: https://test.pypi.org/legacy/
 
  publish-to-pypi:
@@ -84,9 +85,10 @@ jobs:
  name: python-package-distributions
  path: dist/
  - name: Publish distribution to PyPI
- uses: pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6 # v1.10.0
+ uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1
  with:
  skip-existing: true
+ attestations: true
 
  github-release:
  name: Attest Python distribution artifacts and upload them to the GitHub Release