Merge pull request #459 from atsign-foundation/dependabot/github_actions/github-actions-a697c16c6c

build(deps): Bump the github-actions group with 2 updates

Author: gkc

.github/workflows/build-publish.yml

@@ -115,7 +115,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Generate SBOM
-      uses: sbomify/github-action@7906c48e206fe1a885df761bc7239ff3dcfef6b8 # v0.12
+      uses: sbomify/github-action@e344ec6e6916948ce49720a9ac5bafafb7119d47 # v0.13
       env:
         TOKEN: ${{ secrets.SBOMIFY_TOKEN }}
         COMPONENT_ID: 'wy8Kpn8rF9'

.github/workflows/python-package.yml

@@ -32,7 +32,7 @@ jobs:
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install uv
-      uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
+      uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
     - name: Install dependencies, Lint with flake8, Test with pytest
       run: |
         sudo apt-get install python3-poetry-plugin-export