Bump the actions group across 1 directory with 3 updates (#204)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/main.yaml

@@ -28,7 +28,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Install Conda environment from environment.yml
-        uses: mamba-org/setup-micromamba@v1
+        uses: mamba-org/setup-micromamba@v2
         with:
           # environment-file is not assumed anymore
           environment-file: ci/environment.yaml

.github/workflows/pypi-release.yaml

@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v5.2.0
+      - uses: actions/setup-python@v5.3.0
         name: Install Python
         with:
           python-version: "3.11"
@@ -62,7 +62,7 @@ jobs:
     needs: build-artifacts
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-python@v5.2.0
+      - uses: actions/setup-python@v5.3.0
         name: Install Python
         with:
           python-version: "3.11"
@@ -80,7 +80,7 @@ jobs:
           python -m pip install dist/carbonplan_data*.whl
           python -c "from carbonplan_data.utils import get_versions; print(get_versions())"
       - name: Publish package to TestPyPI
-        uses: pypa/gh-action-pypi-publish@v1.10.2
+        uses: pypa/gh-action-pypi-publish@v1.12.2
         with:
           password: ${{ secrets.TEST_PYPI_TOKEN }}
           repository-url: https://test.pypi.org/legacy/
@@ -96,7 +96,7 @@ jobs:
           name: releases
           path: dist
       - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.10.2
+        uses: pypa/gh-action-pypi-publish@v1.12.2
         with:
           password: ${{ secrets.PYPI_TOKEN }}
           # verbose: true