Bump the gh-actions group across 1 directory with 3 updates

Bumps the gh-actions group with 3 updates in the / directory: [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish), [isbang/compose-action](https://github.com/isbang/compose-action) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request).


Updates `pypa/gh-action-pypi-publish` from 1.9.0 to 1.11.0
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@ec4db0b...fb13cb3)

Updates `isbang/compose-action` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/isbang/compose-action/releases)
- [Commits](hoverkraft-tech/compose-action@e5813a5...f1ca7fe)

Updates `peter-evans/create-pull-request` from 6 to 7
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v6...v7)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions
- dependency-name: isbang/compose-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/release.yml

@@ -61,8 +61,8 @@ jobs:
           name: artifact
           path: dist
       - name: Publish package on TestPyPi
-        uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0
+        uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa
         with:
           repository-url: https://test.pypi.org/legacy/
       - name: Publish package on PyPi
-        uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0
+        uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa

.github/workflows/test.yml

@@ -42,7 +42,7 @@ jobs:
 
       - name: Start Docker Compose
         if: ${{ inputs.docker-services != '' }}
-        uses: isbang/compose-action@e5813a5909aca4ae36058edae58f6e52b9c971f8
+        uses: isbang/compose-action@f1ca7fefe3627c2dab0ae1db43a106d82740245e
         with:
           compose-file: docker-compose.yaml
           services: ${{ inputs.docker-services }}

.github/workflows/update-lockfiles.yml

@@ -23,7 +23,7 @@ jobs:
           set -euo pipefail
           pixi update --json | pixi exec pixi-diff-to-markdown >> diff.md
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: Update pixi lockfile