Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.9

[dependabot[bot]]

Bumps pypa/gh-action-pypi-publish from 1.8.8 to 1.8.9.

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.8.9

:nail_care: Cosmetic output improvements

• @​woodruffw added debug output to the trusted publishing OIDC exchange on failures in pypa/gh-action-pypi-publish#174
• @​woodruffw implemented Markdown semantic callouts in README via pypa/gh-action-pypi-publish#175

:hammer_and_wrench: Internal dependencies

• Certifi was bumped from 2023.5.7 to 2023.7.22 @ pypa/gh-action-pypi-publish#171
• Cryptography was bumped from 41.0.2 to 41.0.3 @ pypa/gh-action-pypi-publish#172

Full Diff: https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.8...v1.8.9

Commits

• ade57f5 Merge PRs #174 #175 and #172 into unstable/v1
• 637917e README: re-add "pro tip" language
• 4864f13 README: use semantic callouts
• 326f9ad oidc-exchange: add-trailing-comma
• e5f0690 oidc-exchange: ignore a nested function
• 8bdd0cc oidc-exchange: lintage
• 71a0032 oidc-exchange: render claims if exchange fails
• adef75a Bump cryptography from 41.0.2 to 41.0.3 in /requirements
• 413a8d5 Merge pull request #171 from pypa/dependabot/pip/requirements/certifi-2023.7.22
• c185b8e Bump certifi from 2023.5.7 to 2023.7.22 in /requirements
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)