Merge pull request #2736 from theupdateframework/dependabot/github_actions/action-dependencies-5da8da3d55

build(deps): bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 in the action-dependencies group

Author: kairoaraujo

.github/workflows/cd.yml

@@ -99,7 +99,7 @@ jobs:
       - name: Publish binary wheel and source tarball on PyPI
         # Only attempt pypi upload in upstream repository
         if: github.repository == 'theupdateframework/python-tuf'
-        uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa # v1.11.0
+        uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc # v1.12.2
 
       - name: Finalize GitHub release
         uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1