Bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: pypa/gh-action-pypi-publish and softprops/action-gh-release.

Updates pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.9.0

💅 Cosmetic Output Improvements

• @​woodruffw💰 updated the tense on password nudge in #234
• @​shenxianpeng💰 helped us disable the progress bar that was being produced by the twine upload command via #231
• @​woodruffw💰 also linked the PyPI status dashboard in the trusted publishing error message via pypa/gh-action-pypi-publish#243

🛠️ Internal Dependencies

• pre-commit linters got auto-updated @ #225
• some notable dependency bumps include
  • cryptography == 42.0.7
  • id == 1.4.0
  • idna == 3.7 via #228
  • requests == 2.32.0 via #240
  • Twine == 5.1.0

⚙️ Secret Stuff

In #241, @​br3ndonland💰 added a Docker label linking the container image to this repository for GHCR to display it nicely. This is preparatory work for a big performance-focused refactoring he's working on in #230.

💪 New Contributors

• @​shenxianpeng made their first contribution in pypa/gh-action-pypi-publish#231
• @​br3ndonland made their first contribution in pypa/gh-action-pypi-publish#241

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.14...v1.9.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​pradyunsg💰 for promptly unblocking this release to Marketplace as GitHub started asking for yet another developer agreement signature from the organization admins.

Commits

• ec4db0b Merge PR #243 into unstable/v1
• e790844 oidc-exchange: link to status dashboard
• 87b624f 💅Update homepage @ Dockerfile to GH Marketplace
• da2f9bb Merge pull request #241 from br3ndonland/ghcr-label
• abbea2d Add Docker label for GHCR
• 2734d07 build(deps): bump requests from 2.31.0 to 2.32.0 in /requirements (#240)
• a54b9b8 ---
• 699cd61 ⇪📦 Bump the runtime dep lockfile
• 8414fc2 [pre-commit.ci] pre-commit autoupdate (#225)
• 67a07eb Disable the progress bar when running twine upload
• Additional commits viewable in compare view

Updates softprops/action-gh-release from 2.0.5 to 2.0.6

Release notes

Sourced from softprops/action-gh-release's releases.

v2.0.6

maintenance release with updated dependencies

Changelog

Sourced from softprops/action-gh-release's changelog.

2.0.6

• maintenance release with updated dependencies

2.0.5

• Factor in file names with spaces when upserting files #446 via @​MystiPanda
• Improvements to error handling #449 via @​till

2.0.4

• Minor follow up to #417. #425

2.0.3

• Declare make_latest as an input field in action.yml #419

2.0.2

• Revisit approach to #384 making unresolved pattern failures opt-in #417

2.0.1

• Add support for make_latest property #304 via @​samueljseay
• Fail run if files setting contains invalid patterns #384 via @​rpdelaney
• Add support for proxy env variables (don't use node-fetch) #386 via @​timor-raiman
• Suppress confusing warning when input_files is empty #389 via @​Drowze

2.0.0

• 2.0.0!? this release corrects a disjunction between git tag versions used in the marketplace and versions list this file. Previous versions should have really been 1.*. Going forward this should be better aligned.
• Upgrade action.yml declaration to node20 to address deprecations

0.1.15

• Upgrade to action.yml declaration to node16 to address deprecations
• Upgrade dependencies
• Add asset output as a JSON array containing information about the uploaded assets

0.1.14

• provides an new workflow input option generate_release_notes which when set to true will automatically generate release notes for you based on GitHub activity #179. Please see the GitHub docs for this feature for more information

0.1.13

• fix issue with multiple runs concatenating release bodies #145

0.1.12

• fix bug leading to empty strings subsituted for inputs users don't provide breaking api calls #144

... (truncated)

Commits

• a74c6b7 update changelog
• b909f76 update dist/index.js
• e49d08f chore(deps): bump glob from 8.0.3 to 10.4.2
• f12ad25 chore(deps): bump @​octokit/plugin-throttling from 4.3.2 to 9.3.0
• 7039a82 chore: release 2.0.6
• f9c2b6c chore: update deps and run build
• 73738a6 chore(deps): bump node dep and @types/node
• a500a35 Bump ts-jest from 29.0.3 to 29.1.4 (#459)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

(benchmark 9749081951 / attempt 1)
Base results / Our results / Change

Model	Size	Dump Time	Load Time
sklearn rf 20M	23.4 MiB / 3.0 MiB / 7.67 x	0.02 s / 0.03 s / 1.69 x	0.02 s / 0.03 s / 1.46 x
sklearn rf 20M lzma	6.5 MiB / 2.0 MiB / 3.21 x	9.84 s / 0.80 s / 0.08 x	0.41 s / 0.15 s / 0.37 x
sklearn rf 200M	238.8 MiB / 30.8 MiB / 7.75 x	0.16 s / 0.23 s / 1.48 x	0.23 s / 0.36 s / 1.57 x
sklearn rf 200M lzma	48.8 MiB / 14.8 MiB / 3.29 x	73.11 s / 14.55 s / 0.20 x	3.19 s / 1.14 s / 0.36 x
sklearn rf 1G	1302.2 MiB / 168.0 MiB / 7.75 x	0.89 s / 1.22 s / 1.37 x	1.30 s / 1.95 s / 1.50 x
sklearn rf 1G lzma	262.4 MiB / 99.1 MiB / 2.65 x	376.59 s / 80.84 s / 0.21 x	16.20 s / 6.84 s / 0.42 x
sklearn gb 2M	2.5 MiB / 1.1 MiB / 2.16 x	0.02 s / 0.22 s / 8.97 x	0.03 s / 0.21 s / 7.53 x
sklearn gb 2M lzma	0.6 MiB / 0.2 MiB / 3.76 x	0.76 s / 0.37 s / 0.48 x	0.07 s / 0.23 s / 3.35 x
lgbm gbdt 2M	2.6 MiB / 1.0 MiB / 2.78 x	0.05 s / 0.18 s / 3.93 x	0.01 s / 0.11 s / 13.82 x
lgbm gbdt 2M lzma	0.9 MiB / 0.5 MiB / 1.90 x	0.95 s / 0.35 s / 0.37 x	0.06 s / 0.11 s / 1.98 x
lgbm gbdt 5M	5.3 MiB / 1.9 MiB / 2.81 x	0.09 s / 0.36 s / 3.87 x	0.02 s / 0.18 s / 10.79 x
lgbm gbdt 5M lzma	1.7 MiB / 0.8 MiB / 1.96 x	2.12 s / 0.73 s / 0.35 x	0.11 s / 0.23 s / 2.12 x
lgbm gbdt 20M	22.7 MiB / 7.6 MiB / 3.00 x	0.38 s / 1.45 s / 3.78 x	0.08 s / 0.75 s / 9.58 x
lgbm gbdt 20M lzma	6.3 MiB / 3.0 MiB / 2.09 x	12.05 s / 3.37 s / 0.28 x	0.41 s / 0.89 s / 2.19 x
lgbm gbdt 100M	101.1 MiB / 33.0 MiB / 3.06 x	1.79 s / 6.64 s / 3.70 x	0.35 s / 25.03 s / 70.94 x
lgbm gbdt 100M lzma	25.6 MiB / 10.6 MiB / 2.41 x	58.71 s / 17.02 s / 0.29 x	1.68 s / 3.83 s / 2.28 x
lgbm rf 10M	10.9 MiB / 3.2 MiB / 3.46 x	0.17 s / 0.42 s / 2.41 x	0.03 s / 0.27 s / 9.88 x
lgbm rf 10M lzma	0.7 MiB / 0.4 MiB / 1.86 x	1.23 s / 0.59 s / 0.48 x	0.08 s / 0.30 s / 3.67 x