Update pypa/gh-action-pypi-publish action to v1.6.1 (#882)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[pypa/gh-action-pypi-publish](https://togithub.com/pypa/gh-action-pypi-publish)
| action | minor | `v1.5.1` -> `v1.6.1` |

---

### Release Notes

<details>
<summary>pypa/gh-action-pypi-publish</summary>

###
[`v1.6.1`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.1)

[Compare
Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1)

#### What's happened?!

There was a sneaky bug in v1.6.0 which caused Twine to be outside the
import path in the Python runtime. It is fixed in v1.6.1 by updating
`$PYTHONPATH` to point to a correct location of the user-global
`site-packages/` directory.

**Full Diff**:
pypa/gh-action-pypi-publish@v1.6.0...v1.6.1

###
[`v1.6.0`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.0)

[Compare
Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0)

#### Anything's changed?

The only update is that the Python runtime has been upgraded from 3.9 to
3.11. There are no functional changes in this release.

**Full Changelog**:
pypa/gh-action-pypi-publish@v1.5.2...v1.6.0

###
[`v1.5.2`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.5.2)

[Compare
Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2)

#### What's Improved

- Implemented the Twine transitive dependency tree pinning using
pip-tools-generated constraint files. See
[https://github.com/pypa/gh-action-pypi-publish/issues/107](https://togithub.com/pypa/gh-action-pypi-publish/issues/107)
and
[https://github.com/pypa/gh-action-pypi-publish/issues/101](https://togithub.com/pypa/gh-action-pypi-publish/issues/101)
for details.

**Full Diff**:
pypa/gh-action-pypi-publish@v1.5.1...v1.5.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on monday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC40OC4xIiwidXBkYXRlZEluVmVyIjoiMzQuNDguMSJ9-->

.github/workflows/publish-to-pypi.yaml

@@ -43,7 +43,7 @@ jobs:
         build
         --sdist --wheel --outdir dist/ .
     - name: Publish distribution to PyPI
-      uses: pypa/gh-action-pypi-publish@37f50c210e3d2f9450da2cd423303d6a14a6e29f # v1.5.1
+      uses: pypa/gh-action-pypi-publish@5d1679fa6b895587c6eb10c3fe82205b440a580e # v1.6.1
       with:
         password: ${{ secrets.PYPI_API_TOKEN }}
         packages_dir: dist/