Merge pull request #33 from pyOpenSci/dependabot/github_actions/actions-9dfa31e588

chore: bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0 in the actions group

Author: tkoyama010

Diff for: .github/workflows/publish-pypi.yml

@@ -89,7 +89,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v2.1.1
+      uses: sigstore/gh-action-sigstore-python@v3.0.0
       with:
         inputs: >-
           ./dist/*.tar.gz