Merge pull request matplotlib#27860 from matplotlib/dependabot/github_actions/actions-4dec5bbd2d

Bump the actions group with 2 updates

Author: ksunden

.github/workflows/cibuildwheel.yml

@@ -213,4 +213,4 @@ jobs:
         run: ls dist
 
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf  # v1.8.11
+        uses: pypa/gh-action-pypi-publish@e53eb8b103ffcb59469888563dc324e3c8ba6f06  # v1.8.12

.github/workflows/nightlies.yml

@@ -59,7 +59,7 @@ jobs:
           ls -l dist/
 
       - name: Upload wheels to Anaconda Cloud as nightlies
-        uses: scientific-python/upload-nightly-action@6e9304f7a3a5501c6f98351537493ec898728299  # 0.3.0
+        uses: scientific-python/upload-nightly-action@b67d7fcc0396e1128a474d1ab2b48aa94680f9fc  # 0.5.0
         with:
           artifacts_path: dist
           anaconda_nightly_upload_token: ${{ secrets.ANACONDA_ORG_UPLOAD_TOKEN }}