github: update action versions

backport from mpy-cross-v6.3 branch

Author: dlech

.github/workflows/publish.yml

@@ -30,7 +30,7 @@ jobs:
           platforms: all
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.16.5
+        uses: pypa/cibuildwheel@v2.22.0
         env:
           CIBW_ARCHS_MACOS: x86_64 arm64
           CIBW_ARCHS_LINUX: x86_64 aarch64
@@ -60,6 +60,9 @@ jobs:
   upload_pypi:
     needs: [build_wheels, build_sdist]
     runs-on: ubuntu-latest
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
     # upload to PyPI on every tag
     if: github.event_name == 'push' && github.ref_type == 'tag'
     steps:
@@ -69,7 +72,4 @@ jobs:
           merge-multiple: true
           path: dist
 
-      - uses: pypa/[email protected]
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_TOKEN }}
+      - uses: pypa/[email protected]