Merge pull request #276 from scientific-python/dependabot/github_actions/dot-github/workflows/actions-088cad1836

Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 in /.github/workflows in the actions group

Author: bsipocz

.github/workflows/publish.yml

@@ -46,7 +46,7 @@ jobs:
 
     - name: Publish distribution 📦 to PyPI
       if: startsWith(github.ref, 'refs/tags')
-      uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc  # v1.12.2
+      uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70  # v1.12.3
       with:
         user: __token__
         password: ${{ secrets.pypi_password }}