Merge pull request #2205 from theupdateframework/dependabot/github_actions/pypa/gh-action-pypi-publish-1.6.1

build(deps): bump pypa/gh-action-pypi-publish from 1.5.1 to 1.6.1

Author: jku

.github/workflows/cd.yml

@@ -84,7 +84,7 @@ jobs:
       - name: Publish binary wheel and source tarball on PyPI
         # Only attempt pypi upload in upstream repository
         if: github.repository == 'theupdateframework/python-tuf'
-        uses: pypa/gh-action-pypi-publish@37f50c210e3d2f9450da2cd423303d6a14a6e29f
+        uses: pypa/gh-action-pypi-publish@5d1679fa6b895587c6eb10c3fe82205b440a580e
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}