Bump the github-actions group with 2 updates

Bumps the github-actions group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish).


Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2...v3)

Updates `pypa/gh-action-pypi-publish` from 1.9.0 to 1.10.1
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.9.0...v1.10.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/tests.yml

@@ -135,7 +135,7 @@ jobs:
  echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
  # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL
- uses: github/codeql-action/init@v2
+ uses: github/codeql-action/init@v3
  with:
  languages: python, cpp
  # Override the default behavior so that the action doesn't attempt
@@ -147,7 +147,7 @@ jobs:
  # - name: Autobuild
  # uses: github/codeql-action/autobuild@v1
  - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v2
+ uses: github/codeql-action/analyze@v3
 
  manylinux:
 
@@ -187,7 +187,7 @@ jobs:
  path: wheelhouse/*whl
  name: ${{ matrix.image }}_wheels.zip
  - name: Publish package to PyPI
- uses: pypa/gh-action-pypi-publish@v1.9.0
+ uses: pypa/gh-action-pypi-publish@v1.10.1
  if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
  with:
  user: __token__