[bot] Update GitHub Action Versions (#72)

### GitHub Actions Version Updates
*
**[ad-m/github-push-action](https://github.com/ad-m/github-push-action)**
published a new release
**[v0.8.0](https://github.com/ad-m/github-push-action/releases/tag/v0.8.0)**
on 2023-10-10T04:56:58Z
* **[actions/checkout](https://github.com/actions/checkout)** published
a new release
**[v4.1.1](https://github.com/actions/checkout/releases/tag/v4.1.1)** on
2023-10-17T15:53:17Z
*
**[styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action)**
published a new release
**[0.12.1](https://github.com/styfle/cancel-workflow-action/releases/tag/0.12.1)**
on 2024-01-25T16:36:58Z
* **[actions/github-script](https://github.com/actions/github-script)**
published a new release
**[v7.0.1](https://github.com/actions/github-script/releases/tag/v7.0.1)**
on 2023-11-17T22:21:53Z
*
**[pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish)**
published a new release
**[v1.8.11](https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.8.11)**
on 2023-11-29T02:41:33Z
* **[actions/setup-python](https://github.com/actions/setup-python)**
published a new release
**[v5.0.0](https://github.com/actions/setup-python/releases/tag/v5.0.0)**
on 2023-12-06T10:59:28Z
*
**[mamba-org/setup-micromamba](https://github.com/mamba-org/setup-micromamba)**
published a new release
**[v1.8.0](https://github.com/mamba-org/setup-micromamba/releases/tag/v1.8.0)**
on 2024-01-23T11:09:46Z

.github/workflows/bump-version.yml

@@ -38,10 +38,10 @@ jobs:
       actions: read
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5.0.0
         with:
           python-version: "3.9"
       - name: Config Commit Bot
@@ -57,7 +57,7 @@ jobs:
           bump-my-version bump --tag patch
           echo "new_version=$(grep -E '__version__'  xhydro/__init__.py | cut -d ' ' -f3)"
       - name: Push Changes
-        uses: ad-m/github-push-action@master
+        uses: ad-m/github-push-action@v0.8.0
         with:
           force: false
           github_token: ${{ secrets.BUMP_VERSION_TOKEN }}

.github/workflows/first_pull_request.yml

@@ -16,7 +16,7 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v7.0.1
         with:
           script: |
             // Get a list of all issues created by the PR opener

.github/workflows/main.yml

@@ -26,12 +26,12 @@ jobs:
           - "3.x"
     steps:
       - name: Cancel previous runs
-        uses: styfle/cancel-workflow-action@0.11.0
+        uses: styfle/cancel-workflow-action@0.12.1
         with:
           access_token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.1
       - name: Set up Python${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.0.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install tox
@@ -53,9 +53,9 @@ jobs:
       run:
         shell: bash -l {0}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.1
       - name: Setup Conda (Micromamba) with Python${{ matrix.python-version }}
-        uses: mamba-org/setup-micromamba@v1
+        uses: mamba-org/setup-micromamba@v1.8.0
         with:
           cache-downloads: true
           environment-file: environment-dev.yml

.github/workflows/publish-pypi.yml

@@ -17,9 +17,9 @@ jobs:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.1
       - name: Set up Python3
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.0.0
         with:
           python-version: "3.9"
       - name: Install packaging libraries
@@ -29,4 +29,4 @@ jobs:
         run: |
           python -m flit build
       - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@v1.8.11

.github/workflows/tag-testpypi.yml

@@ -17,7 +17,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.1
       - name: Create Release
         uses: softprops/action-gh-release@v1
         env:
@@ -37,9 +37,9 @@ jobs:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.1
       - name: Set up Python3
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.0.0
         with:
           python-version: "3.9"
       - name: Install packaging libraries
@@ -49,7 +49,7 @@ jobs:
         run: |
           python -m flit build
       - name: Publish distribution 📦 to Test PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@v1.8.11
         with:
           repository-url: https://test.pypi.org/legacy/
           skip-existing: true