Merge pull request #38 from astropy/dependabot/github_actions/dot-github/workflows/actions-dd090eb7b6

Author: neutrinoceros

.github/workflows/update_and_publish.yml

@@ -28,7 +28,7 @@ jobs:
           echo "changed=false" > $GITHUB_OUTPUT
         fi
 
-    - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55  # v5.5.0
+    - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
       if: steps.check.outputs.changed
       with:
         python-version: '3.x'
@@ -90,7 +90,7 @@ jobs:
           custom_tag: ${{ steps.tag_name.outputs.version }}
           tag_prefix: ""
       - name: Create GitHub release
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda  # v2.2.1
+        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631  # v2.2.2
         with:
           tag_name: ${{ steps.tag_name.outputs.version }}
           generate_release_notes: true