👷 ci(release): pin github-workflows 6.2.0 (#168)

Moves every
[`tox-dev/github-workflows`](https://github.com/tox-dev/github-workflows)
pin to
[6.2.0](https://github.com/tox-dev/github-workflows/releases/tag/6.2.0).
👋 The GitHub Release now credits first-time contributors: the publish
step takes the New Contributors list from GitHub's generated notes for
the range since the previous tag and places it above the package and
comparison links
([#34](tox-dev/github-workflows#34)). The
changelog file no longer carries that list.

The pins also pick up the 6.0.2 to 6.1.0 changes: release asset names
match the names GitHub stores
([#29](tox-dev/github-workflows#29)), and the
rendered notes list several packages on one row with an ecosystem emoji
([#32](tox-dev/github-workflows#32)).

Author: gaborbernat

.github/workflows/news.yaml

@@ -24,9 +24,9 @@ jobs:
           python-version: "3.15"
           enable-cache: false
       - name: 📦 Install locked release tools
-        uses: tox-dev/github-workflows/install-locked-tools@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+        uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           groups: release-news
           venv: ${{ runner.temp }}/release-tools
       - name: 🔍 Validate news fragments
-        uses: tox-dev/github-workflows/validate-news@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+        uses: tox-dev/github-workflows/validate-news@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0

.github/workflows/prepare-release.yaml

@@ -12,7 +12,7 @@ permissions: {}
 jobs:
   prepare:
     name: 🏷️ Prepare Towncrier release
-    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
     permissions:
       contents: read
       pull-requests: read

.github/workflows/release.yaml

@@ -10,7 +10,7 @@ concurrency:
 jobs:
   build:
     name: 🏗️ Build
-    uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+    uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
     permissions:
       contents: read
   notes:
@@ -33,17 +33,17 @@ jobs:
           python-version: "3.15"
           enable-cache: false
       - name: 📦 Install locked release tools
-        uses: tox-dev/github-workflows/install-locked-tools@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+        uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           groups: release-notes
           venv: ${{ runner.temp }}/release-tools
       - name: 🏷️ Select previous tag
         id: previous
-        uses: tox-dev/github-workflows/select-previous-tag@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+        uses: tox-dev/github-workflows/select-previous-tag@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           tag: ${{ github.ref_name }}
       - name: 📝 Render release notes
-        uses: tox-dev/github-workflows/render-release-notes@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+        uses: tox-dev/github-workflows/render-release-notes@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           tag: ${{ github.ref_name }}
           previous: ${{ steps.previous.outputs.previous }}
@@ -101,13 +101,13 @@ jobs:
           artifact-ids: ${{ needs.notes.outputs.artifact-id }}
           path: ${{ runner.temp }}
       - name: 🔍 Verify PyPI artifacts
-        uses: tox-dev/github-workflows/reconcile-pypi-artifacts@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+        uses: tox-dev/github-workflows/reconcile-pypi-artifacts@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           project: python-discovery
           version: ${{ github.ref_name }}
           dist: dist
       - name: 🚀 Publish GitHub release
-        uses: tox-dev/github-workflows/publish-github-release@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+        uses: tox-dev/github-workflows/publish-github-release@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         env:
           GH_TOKEN: ${{ github.token }}
         with:

.github/workflows/upgrade-release-tools.yaml

@@ -10,7 +10,7 @@ concurrency:
 jobs:
   upgrade:
     name: 🔀 Upgrade release tools
-    uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@259a3d3fb578d00517ffb73341fdd463259b0b2f # 6.0.1
+    uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
     permissions:
       contents: read
     secrets: