Merge pull request #261 from atsign-foundation/dependabot/github_acti…

…ons/github-actions-92cd5b737a

build(deps): Bump pypa/gh-action-pypi-publish from 1.10.0 to 1.10.1 in the github-actions group

.github/workflows/build-publish.yml

@@ -61,9 +61,10 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution to TestPyPI
-      uses: pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6 # v1.10.0
+      uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1
       with:
         skip-existing: true
+        attestations: true
         repository-url: https://test.pypi.org/legacy/
 
   publish-to-pypi:
@@ -84,9 +85,10 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution to PyPI
-      uses: pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6 # v1.10.0
+      uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1
       with:
         skip-existing: true
+        attestations: true
 
   github-release:
     name: Attest Python distribution artifacts and upload them to the GitHub Release