Merge pull request #2330 from theupdateframework/dependabot/github_actions/pypa/gh-action-pypi-publish-1.7.1

build(deps): bump pypa/gh-action-pypi-publish from 1.6.4 to 1.7.1

Author: Lukas Pühringer

.github/workflows/cd.yml

@@ -102,7 +102,7 @@ jobs:
       - name: Publish binary wheel and source tarball on PyPI
         # Only attempt pypi upload in upstream repository
         if: github.repository == 'theupdateframework/python-tuf'
-        uses: pypa/gh-action-pypi-publish@c7f29f7adef1a245bd91520e94867e5c6eedddcc
+        uses: pypa/gh-action-pypi-publish@22b4d1f12511f2696162c08546dafbaa903448a2
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}