Merge pull request #8 from instructlab/dependabot/github_actions/pypa/gh-action-pypi-publish-1.9.0

Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0

Author: nathan-weinberg

.github/workflows/pypi.yaml

@@ -77,7 +77,7 @@ jobs:
                   path: dist
 
             - name: "Upload to Test PyPI"
-              uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14
+              uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0
               with:
                   repository-url: https://test.pypi.org/legacy/
 
@@ -128,4 +128,4 @@ jobs:
                   rm ./dist/*.sigstore
 
             - name: "Upload to PyPI"
-              uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14
+              uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0