⬆️🩹 Update minor stable updates

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/create-github-app-token	action	minor	v3.0.0 → v3.1.0	v3.1.1
pypa/gh-action-pypi-publish	action	minor	v1.13.0 → v1.14.0
release-drafter/release-drafter	action	minor	v7.1.1 → v7.2.0

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v3.1.0

Compare Source

Bug Fixes

• deps: bump p-retry from 7.1.1 to 8.0.0 (#​357) (3bbe07d)

Features

• add client-id input and deprecate app-id (#​353) (e6bd4e6)
• update permission inputs (#​358) (076e948)

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

v1.14.0

Compare Source

Audit your supply chain regularly!

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @​whitequark💰 in #​397.

📝 Docs

@​woodruffw💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #​388 and @​him2him2💰 brushed up some grammar in the README and SECURITY docs via #​395.

🛠️ Internal Updates

@​woodruffw💰 bumped sigstore and pypi-attestations in the lock file (#​391) and @​webknjaz💰 added infra for using type annotations in the project (#​381).

💪 New Contributors

• @​him2him2 made their first contribution in #​395
• @​whitequark made their first contribution in #​397

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​facutuesca💰 and @​woodruffw💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

release-drafter/release-drafter (release-drafter/release-drafter)

v7.2.0

Compare Source

What's Changed

New

• feat: allow always collapsing a category (#​1444) @​mhanberg

Bug Fixes

• fix: improve advanced substitutions in replacers (#​1555) @​jetersen
• fix: support repo-only _extends and prevent .github/ path doubling (#​1577) @​jetersen

Maintenance

• chore(deps): update dependency typescript to 6.0.2 (#​1587) @​renovate[bot]
• chore(deps): update vitest to 4.1.4 (#​1585) @​renovate[bot]
• ci(deps): update peter-evans/create-pull-request action to v8 (#​1588) @​renovate[bot]
• chore(deps): update dependency vite to 8.0.5 (#​1579) @​renovate[bot]
• chore(deps): update dependency nock to 14.0.12 (#​1583) @​renovate[bot]
• chore(deps): update dependency @​types/node to 24.12.2 (#​1582) @​renovate[bot]
• chore(deps): update dependency @​biomejs/biome to 2.4.10 (#​1581) @​renovate[bot]
• chore: move codegen to monthly scheduled workflow (#​1578) @​jetersen
• chore: replace vite-tsconfig-paths plugin with native resolve.tsconfigPaths (#​1571) @​jetersen

Documentation

• docs: fix autolabeler example tag (#​1568) @​cchanche

Dependency Updates

• build(deps): bump lodash and @​graphql-codegen/plugin-helpers (#​1589) @​dependabot[bot]
• fix(deps): update dependency @​actions/github to 9.1.0 (#​1586) @​renovate[bot]
• chore(deps): update dependency yaml to 2.8.3 (#​1580) @​renovate[bot]
• chore(deps): update node.js to v24.14.1 (#​1584) @​renovate[bot]
• chore(deps): update dependency @​biomejs/biome to 2.4.10 (#​1581) @​renovate[bot]

Full Changelog: release-drafter/release-drafter@v7.1.1...v7.2.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.