ci: bump the actions group across 1 directory with 2 updates

Bumps the actions group with 2 updates in the / directory: [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) and [hoverkraft-tech/compose-action](https://github.com/hoverkraft-tech/compose-action).


Updates `pypa/gh-action-pypi-publish` from 1.10.1 to 1.10.3
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.10.1...v1.10.3)

Updates `hoverkraft-tech/compose-action` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/hoverkraft-tech/compose-action/releases)
- [Commits](hoverkraft-tech/compose-action@v2.0.1...v2.0.2)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: hoverkraft-tech/compose-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/build.yml

@@ -42,4 +42,4 @@ jobs:
     - name: Publish
       ## TODO: create a trusted publisher on PyPI
       ## https://docs.pypi.org/trusted-publishers/
-      uses: pypa/gh-action-pypi-publish@v1.10.1
+      uses: pypa/gh-action-pypi-publish@v1.10.3

.github/workflows/test.yml

@@ -16,7 +16,7 @@ jobs:
         python-version: ["3.10", "3.11"]
     steps:
     - uses: actions/checkout@v4
-    - uses: hoverkraft-tech/compose-action@v2.0.1
+    - uses: hoverkraft-tech/compose-action@v2.0.2
       with:
         compose-file: "./docker-compose.yml"
         down-flags: "--remove-orphans"