build(deps): bump the ci-dependencies group across 1 directory with 2 updates

Bumps the ci-dependencies group with 2 updates in the /.github/workflows directory: [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request).


Updates `pypa/gh-action-pypi-publish` from 1.12.3 to 1.12.4
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.12.3...v1.12.4)

Updates `peter-evans/create-pull-request` from 7.0.5 to 7.0.7
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v7.0.5...v7.0.7)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-dependencies
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/ci_package.yml

@@ -34,6 +34,6 @@ jobs:
 
       - name: "Publish package"
         if: "${{ startsWith(github.ref, 'refs/tags/') }}"
-        uses: "pypa/gh-action-pypi-publish@v1.12.3"
+        uses: "pypa/gh-action-pypi-publish@v1.12.4"
         with:
           attestations: false  # Disable attestations until publishing to PyPI from reusable workflow will be fixed

.github/workflows/release_pr.yml

@@ -47,7 +47,7 @@ jobs:
           private_key: "${{ secrets.BADABUMP_APP_PRIVATE_KEY }}"
 
       - name: "Create pull request with changed files"
-        uses: "peter-evans/create-pull-request@v7.0.5"
+        uses: "peter-evans/create-pull-request@v7.0.7"
         with:
           token: "${{ steps.token.outputs.token }}"
           commit-message: |