Bump the github-actions group with 3 updates (pallets-eco#280)

Author: macnewbold

.github/workflows/publish.yaml

@@ -10,7 +10,7 @@ jobs:
  hash: ${{ steps.hash.outputs.hash }}
  steps:
  - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+ - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
  with:
  python-version: '3.x'
  cache: pip
@@ -23,7 +23,7 @@ jobs:
  - name: generate hash
  id: hash
  run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
- - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+ - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
  with:
  path: ./dist
  provenance:
@@ -44,7 +44,7 @@ jobs:
  permissions:
  contents: write
  steps:
- - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+ - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
  - name: create release
  run: >
  gh release create --draft --repo ${{ github.repository }}
@@ -63,7 +63,7 @@ jobs:
  permissions:
  id-token: write
  steps:
- - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+ - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
  - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0
  with:
  repository-url: https://test.pypi.org/legacy/

.github/workflows/tests.yaml

@@ -29,7 +29,7 @@ jobs:
  - {name: Minimal, python: '3.12', tox: minimal}
  steps:
  - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+ - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
  with:
  python-version: ${{ matrix.python }}
  allow-prereleases: true
@@ -41,7 +41,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+ - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
  with:
  python-version: '3.x'
  cache: pip