Merge pull request #9 from astropy/dependabot/github_actions/dot-gith…

…ub/workflows/actions-0cdc55544d

build(deps): bump the actions group in /.github/workflows with 2 updates

.github/workflows/package.yml

@@ -37,7 +37,7 @@ jobs:
           python -m pep517.build --source --binary --out-dir dist/ .
 
       - name: Publish distribution to PyPI
-        uses: pypa/gh-action-pypi-publish@897895f1e160c830e369f9779632ebc134688e1b  # v1.10.2
+        uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597  # v1.10.3
         with:
           user: __token__
           password: ${{ secrets.pypi_password }}

.github/workflows/update_stats.yml

@@ -37,7 +37,7 @@ jobs:
       # cache key syntax: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/caching-dependencies-to-speed-up-workflows#using-contexts-to-create-cache-keys
       - name: Restore cached files
         id: cache-files-restore
-        uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9  # v4.0.2
+        uses: actions/cache/restore@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2  # v4.1.0
         with: 
           path: ./cache
           key: ${{ runner.os }}-${{ hashFiles('~/.cache_key') }}
@@ -51,7 +51,7 @@ jobs:
       # otherwise the cache save will 'fail' (because there's no need to update it - that's fine)
       - name: Update cached files
         id: cache-files-save
-        uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9  # v4.0.2
+        uses: actions/cache/save@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2  # v4.1.0
         with:
           path: ./cache
           key: ${{ runner.os }}-${{ hashFiles('./cache') }}