⬆️🩹 Update minor stable updates (#844)

renovate[bot] · web-flow · commit f976dfbdb68f · 2026-04-18T01:53:45.000Z
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [actions/create-github-app-token](https://redirect.github.com/actions/create-github-app-token) | action | minor | `v3.0.0` → `v3.1.0` | `v3.1.1` | | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) | action | minor | `v1.13.0` → `v1.14.0` | | | [release-drafter/release-drafter](https://redirect.github.com/release-drafter/release-drafter) | action | minor | `v7.1.1` → `v7.2.0` | | --- ### Release Notes <details> <summary>actions/create-github-app-token (actions/create-github-app-token)</summary> ### [`v3.1.0`](https://redirect.github.com/actions/create-github-app-token/releases/tag/v3.1.0) [Compare Source](https://redirect.github.com/actions/create-github-app-token/compare/v3.0.0...v3.1.0) ##### Bug Fixes - **deps:** bump p-retry from 7.1.1 to 8.0.0 ([#&#8203;357](https://redirect.github.com/actions/create-github-app-token/issues/357)) ([3bbe07d](https://redirect.github.com/actions/create-github-app-token/commit/3bbe07d928e2d6c30bf3e37c6b89edbc4045facf)) ##### Features - add `client-id` input and deprecate `app-id` ([#&#8203;353](https://redirect.github.com/actions/create-github-app-token/issues/353)) ([e6bd4e6](https://redirect.github.com/actions/create-github-app-token/commit/e6bd4e6970172bed9fe138b2eaf4cbffa4cca8f9)) - update permission inputs ([#&#8203;358](https://redirect.github.com/actions/create-github-app-token/issues/358)) ([076e948](https://redirect.github.com/actions/create-github-app-token/commit/076e9480ca6e9633bff412d05eff0fc2f1e7d2be)) </details> <details> <summary>pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)</summary> ### [`v1.14.0`](https://redirect.github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.0) [Compare Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.13.0...v1.14.0) <p align="right"><i>Audit your supply chain regularly!</i></p> #### ✨ What's Changed The main change in this release is that `verbose` and `print-hash` inputs are now on by default. This was contributed by [@&#8203;whitequark](https://redirect.github.com/whitequark)[💰](https://redirect.github.com/sponsors/whitequark) in [#&#8203;397](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/397). #### 📝 Docs [@&#8203;woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw) updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in [#&#8203;388](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/388) and [@&#8203;him2him2](https://redirect.github.com/him2him2)[💰](https://redirect.github.com/sponsors/him2him2) brushed up some grammar in the README and SECURITY docs via [#&#8203;395](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/395). #### 🛠️ Internal Updates [@&#8203;woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw) bumped `sigstore` and `pypi-attestations` in the lock file ([#&#8203;391](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/391)) and [@&#8203;webknjaz](https://redirect.github.com/webknjaz)[💰][GH Sponsors URL] added infra for using type annotations in the project ([#&#8203;381](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/381)). #### 💪 New Contributors - [@&#8203;him2him2](https://redirect.github.com/him2him2) made their first contribution in [#&#8203;395](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/395) - [@&#8203;whitequark](https://redirect.github.com/whitequark) made their first contribution in [#&#8203;397](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/397) **🪞 Full Diff**: <pypa/gh-action-pypi-publish@v1.13.0...v1.14.0> **🧔‍♂️ Release Manager:** [@&#8203;webknjaz](https://redirect.github.com/sponsors/webknjaz) [🇺🇦](https://stand-with-ukraine.pp.ua) **🙏 Special Thanks** to [@&#8203;facutuesca](https://redirect.github.com/facutuesca)[💰](https://redirect.github.com/sponsors/facutuesca) and [@&#8203;woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw) for helping maintain this project when [I][GH Sponsors URL] can't! **💬 Discuss** [on Bluesky 🦋](https://bsky.app/profile/webknjaz.me/post/3mivwsz3qzk2e), [on Mastodon 🐘](https://mastodon.social/@&#8203;webknjaz/116363779997051422) and [on GitHub][release discussion]. [![GH Sponsors badge]][GH Sponsors URL] [GH Sponsors badge]: https://img.shields.io/badge/%40webknjaz-transparent?logo=githubsponsors&logoColor=%23EA4AAA&label=Sponsor&color=2a313c [GH Sponsors URL]: https://redirect.github.com/sponsors/webknjaz [release discussion]: https://redirect.github.com/pypa/gh-action-pypi-publish/discussions/404 </details> <details> <summary>release-drafter/release-drafter (release-drafter/release-drafter)</summary> ### [`v7.2.0`](https://redirect.github.com/release-drafter/release-drafter/releases/tag/v7.2.0) [Compare Source](https://redirect.github.com/release-drafter/release-drafter/compare/v7.1.1...v7.2.0) ### What's Changed #### New - feat: allow always collapsing a category ([#&#8203;1444](https://redirect.github.com/release-drafter/release-drafter/issues/1444)) [@&#8203;mhanberg](https://redirect.github.com/mhanberg) #### Bug Fixes - fix: improve advanced substitutions in replacers ([#&#8203;1555](https://redirect.github.com/release-drafter/release-drafter/issues/1555)) [@&#8203;jetersen](https://redirect.github.com/jetersen) - fix: support repo-only \_extends and prevent .github/ path doubling ([#&#8203;1577](https://redirect.github.com/release-drafter/release-drafter/issues/1577)) [@&#8203;jetersen](https://redirect.github.com/jetersen) #### Maintenance - chore(deps): update dependency typescript to 6.0.2 ([#&#8203;1587](https://redirect.github.com/release-drafter/release-drafter/issues/1587)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update vitest to 4.1.4 ([#&#8203;1585](https://redirect.github.com/release-drafter/release-drafter/issues/1585)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - ci(deps): update peter-evans/create-pull-request action to v8 ([#&#8203;1588](https://redirect.github.com/release-drafter/release-drafter/issues/1588)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency vite to 8.0.5 ([#&#8203;1579](https://redirect.github.com/release-drafter/release-drafter/issues/1579)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency nock to 14.0.12 ([#&#8203;1583](https://redirect.github.com/release-drafter/release-drafter/issues/1583)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency [@&#8203;types/node](https://redirect.github.com/types/node) to 24.12.2 ([#&#8203;1582](https://redirect.github.com/release-drafter/release-drafter/issues/1582)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency [@&#8203;biomejs/biome](https://redirect.github.com/biomejs/biome) to 2.4.10 ([#&#8203;1581](https://redirect.github.com/release-drafter/release-drafter/issues/1581)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore: move codegen to monthly scheduled workflow ([#&#8203;1578](https://redirect.github.com/release-drafter/release-drafter/issues/1578)) [@&#8203;jetersen](https://redirect.github.com/jetersen) - chore: replace vite-tsconfig-paths plugin with native resolve.tsconfigPaths ([#&#8203;1571](https://redirect.github.com/release-drafter/release-drafter/issues/1571)) [@&#8203;jetersen](https://redirect.github.com/jetersen) #### Documentation - docs: fix autolabeler example tag ([#&#8203;1568](https://redirect.github.com/release-drafter/release-drafter/issues/1568)) [@&#8203;cchanche](https://redirect.github.com/cchanche) #### Dependency Updates - build(deps): bump lodash and [@&#8203;graphql-codegen/plugin-helpers](https://redirect.github.com/graphql-codegen/plugin-helpers) ([#&#8203;1589](https://redirect.github.com/release-drafter/release-drafter/issues/1589)) @&#8203;[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - fix(deps): update dependency [@&#8203;actions/github](https://redirect.github.com/actions/github) to 9.1.0 ([#&#8203;1586](https://redirect.github.com/release-drafter/release-drafter/issues/1586)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency yaml to 2.8.3 ([#&#8203;1580](https://redirect.github.com/release-drafter/release-drafter/issues/1580)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update node.js to v24.14.1 ([#&#8203;1584](https://redirect.github.com/release-drafter/release-drafter/issues/1584)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency [@&#8203;biomejs/biome](https://redirect.github.com/biomejs/biome) to 2.4.10 ([#&#8203;1581](https://redirect.github.com/release-drafter/release-drafter/issues/1581)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) **Full Changelog**: <release-drafter/release-drafter@v7.1.1...v7.2.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/munich-quantum-toolkit/ddsim).  Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -54,4 +54,4 @@ jobs:
         uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
         with:
           subject-path: dist/*
-      - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
+      - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
@@ -14,4 +14,4 @@ jobs:
       contents: write
     runs-on: ubuntu-slim
     steps:
-      - uses: release-drafter/release-drafter@139054aeaa9adc52ab36ddf67437541f039b88e2 # v7.1.1
+      - uses: release-drafter/release-drafter@5de93583980a40bd78603b6dfdcda5b4df377b32 # v7.2.0
diff --git a/.github/workflows/templating.yml b/.github/workflows/templating.yml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: write
     steps:
       - id: create-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@7bd03711494f032dfa3be3558f7dc8787b0be333 # v3.1.0
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
