Update GitHub Actions

.github/workflows/detect_version_bump.yml

@@ -28,7 +28,7 @@ jobs:
           echo "::set-output name=result::$IS_PRERELEASE"
       - name: Create Release
         # use hash for security since this has access to the access token
-        uses: ncipollo/release-action@4c75f0f2e4ae5f3c807cf0904605408e319dcaac # v1.8.6
+        uses: ncipollo/release-action@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5 # v1.14.0
         with:
           token: ${{ secrets.ACCESS_TOKEN }}
           tag: v${{ steps.get-new-version.outputs.version }}

.github/workflows/lint.yml

@@ -7,6 +7,6 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: 🧼 lint renovate config # Validates changes to renovate.json config file
-        uses: suzuki-shunsuke/[email protected].2
+        uses: suzuki-shunsuke/[email protected].3
         with:
           config_file_path: 'renovate.json'

.github/workflows/main.yml

@@ -131,7 +131,7 @@ jobs:
           if: ${{ always() }}
 
         - name: Publish coverage results to Codecov
-          uses: codecov/[email protected].1
+          uses: codecov/[email protected].6
           with:
             file: coverage-${{ matrix.python-version }}.xml
             fail_ci_if_error: true

.github/workflows/python-publish.yml

@@ -46,6 +46,6 @@ jobs:
         # v1.4.2 release. Using full SHA for security
         # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
       - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@37f50c210e3d2f9450da2cd423303d6a14a6e29f
+        uses: pypa/gh-action-pypi-publish@24c5d5ca4a35300bc01ffd365bcf1d71e2cf084e
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}