update various actions (#41)

Author: hwhmeikle

.github/workflows/release-package.yml

@@ -14,12 +14,12 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.5.0
         with:
           python-version: "3.x"
 
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@v1.4.1
 
       - name: Install dependencies
         run: poetry install
@@ -68,6 +68,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     needs:
       - build
+      - publish-to-testpypi
     runs-on: ubuntu-latest
     environment:
       name: pypi
@@ -84,22 +85,22 @@ jobs:
 
       # Add signing steps before publishing
       - name: Set up Python environment
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.5.0
         with:
           python-version: "3.x"
       - name: Install cryptography version 43
         run: |
           python -m pip install --upgrade pip
           pip install cryptography==43.*
       - name: Sign the dists with Sigstore
-        uses: sigstore/gh-action-sigstore-python@v2.1.1
+        uses: sigstore/gh-action-sigstore-python@v3.0.0
         with:
           inputs: >-
             ./dist/*.tar.gz
             ./dist/*.whl
 
       - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@v1.12.4
 
   publish-to-testpypi:
     name: Publish Python 🐍 distribution 📦 to TestPyPI
@@ -121,6 +122,6 @@ jobs:
           name: python-package-distributions-testing
           path: dist/
       - name: Publish distribution 📦 to TestPyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@v1.12.4
         with:
           repository-url: https://test.pypi.org/legacy/