Merge pull request #149 from pytest-dev/dependabot/github_actions/github-actions-095e3e9835

Bump the github-actions group with 2 updates

Author: nicoddemus

.github/workflows/deploy.yml

@@ -39,7 +39,9 @@ jobs:
         path: dist
 
     - name: Publish package to PyPI
-      uses: pypa/[email protected]
+      uses: pypa/[email protected]
+      with:
+        attestations: true
 
     - name: Push tag
       run: |
@@ -49,7 +51,7 @@ jobs:
         git push origin v${{ github.event.inputs.version }}
 
     - name: GitHub Release
-      uses: softprops/action-gh-release@v1
+      uses: softprops/action-gh-release@v2
       with:
         files: dist/*
         tag_name: v${{ github.event.inputs.version }}