Bump pypa/gh-action-pypi-publish from 1.5.1 to 1.5.2

[dependabot[bot]]

Bumps pypa/gh-action-pypi-publish from 1.5.1 to 1.5.2.

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.5.2

What's Improved

• Implemented the Twine transitive dependency tree pinning using pip-tools-generated constraint files. See pypa/gh-action-pypi-publish#107 and pypa/gh-action-pypi-publish#101 for details.

Full Diff: https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2

Commits

• d7edd4c Add user-global site-packages to $PYTHONPATH
• 8d5f27c Install Twine in the user-global site-packages
• b0dc178 Disable pip cache dir with an env var
• bbf6e0b Copy requirements to corresponding dir @ container
• 0b69a8c Document broken pkginfo==1.9.0 transitive dep
• c54db9c Integrate pip-tools-generated constraint files
• 480ec4e Inherit yamllint config from the default preset
• 5fb2f04 Drop __token__ from README code usage snippets
• 7bbdccd Update the mention of master with unstable/v1
• 328cf89 📝 Fix a link to the "Distribution Package" term
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

A newer version of pypa/gh-action-pypi-publish exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

[dependabot[bot]]

Superseded by #419.