Update pypa/gh-action-pypi-publish action to v1.8.10

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
pypa/gh-action-pypi-publish	action	patch	v1.8.7 -> v1.8.10

---

Release Notes

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

v1.8.10

Compare Source

🐛 What's Fixed

@​woodruffw fixed decoding OIDC claims in debug output on failure by applying correct padding to the encoded payload via https://github.com/pypa/gh-action-pypi-publish/pull/177.

Full Diff: pypa/gh-action-pypi-publish@v1.8.9...v1.8.10

v1.8.9

Compare Source

💅 Cosmetic output improvements

• @​woodruffw added debug output to the trusted publishing OIDC exchange on failures in https://github.com/pypa/gh-action-pypi-publish/pull/174
• @​woodruffw implemented Markdown semantic callouts in README via https://github.com/pypa/gh-action-pypi-publish/pull/175

🛠️ Internal dependencies

• Certifi was bumped from 2023.5.7 to 2023.7.22 @&#https://github.com/pypa/gh-action-pypi-publish/pull/171ll/171
• Cryptography was bumped from 41.0.2 to 41.0.3 @&#https://github.com/pypa/gh-action-pypi-publish/pull/172ll/172

Full Diff: pypa/gh-action-pypi-publish@v1.8.8...v1.8.9

v1.8.8

Compare Source

💅 Cosmetic output improvements

• In https://github.com/pypa/gh-action-pypi-publish/pull/167, @​woodruffw introduced a nudge-warning encouraging people to start using secretless publishing to PyPI, as suggested by @​sethmlarson in https://github.com/pypa/gh-action-pypi-publish/issues/164, collaborating with @​di.

  💡 Tip: The OIDC-based trusted publishing integration details can be found in the action README at https://github.com/marketplace/actions/pypi-publish#trusted-publishing and on the PyPI docs page at https://docs.pypi.org/trusted-publishers/. It's gone GA on April 20, 2023, during PyCon: https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/. And the Trail Of Bits blog post has some deeper explanation here: https://blog.trailofbits.com/2023/05/23/trusted-publishing-a-new-benchmark-for-packaging-security/.

🛠️ Internal dependencies

• @​pquentin bumped the runtime dependency pins to the recent versions @&#https://github.com/pypa/gh-action-pypi-publish/pull/168ll/168.

💪 New Contributors

• @​pquentin made their first contribution in https://github.com/pypa/gh-action-pypi-publish/pull/168

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.7...v1.8.8

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov]

Codecov Report

Merging #765 (3312d34) into main (8028124) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #765   +/-   ##
=======================================
  Coverage   81.89%   81.89%           
=======================================
  Files          51       51           
  Lines        1348     1348           
  Branches      169      169           
=======================================
  Hits         1104     1104           
  Misses        143      143           
  Partials      101      101