Update pypa/gh-action-pypi-publish action to v1.8.6 (#179)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[pypa/gh-action-pypi-publish](https://togithub.com/pypa/gh-action-pypi-publish)
| action | patch | `v1.8.5` -> `v1.8.6` |

---

### Release Notes

<details>
<summary>pypa/gh-action-pypi-publish</summary>

###
[`v1.8.6`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.8.6)

[Compare
Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.8.5...v1.8.6)

#### What's Updated

- [@&#8203;woodruffw] dropped the references to a “private beta” from
the project docs and runtime in
[https://github.com/pypa/gh-action-pypi-publish/pull/147](https://togithub.com/pypa/gh-action-pypi-publish/pull/147).
He also clarified that the API tokens are still more secure than
passwords in
[https://github.com/pypa/gh-action-pypi-publish/pull/150](https://togithub.com/pypa/gh-action-pypi-publish/pull/150).
- [@&#8203;asherf] noticed that the action metadata incorrectly marked
the `password` field as required and contributed a correction in
[https://github.com/pypa/gh-action-pypi-publish/pull/151](https://togithub.com/pypa/gh-action-pypi-publish/pull/151)
- [@&#8203;webknjaz] moved the Trusted Publishing example to the top of
the README in hopes that new users would default to using it via
pypa/gh-action-pypi-publish@f47b347

#### New Contributors

- [@&#8203;asherf] made their first contribution in
[https://github.com/pypa/gh-action-pypi-publish/pull/151](https://togithub.com/pypa/gh-action-pypi-publish/pull/151)

**Full Diff**:
pypa/gh-action-pypi-publish@v1.8.5...v1.8.6

[@&#8203;asherf]: https://togithub.com/sponsors/asherf

[@&#8203;webknjaz]: https://togithub.com/sponsors/webknjaz

[@&#8203;woodruffw]: https://togithub.com/sponsors/woodruffw

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/allenporter/flux-local).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS43MS4wIiwidXBkYXRlZEluVmVyIjoiMzUuNzEuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/python-publish.yaml

@@ -26,7 +26,7 @@ jobs:
     - name: Build package
       run: python -m build
     - name: Publish package
-      uses: pypa/[email protected].5
+      uses: pypa/[email protected].6
       with:
         user: __token__
         password: ${{ secrets.PYPI_API_TOKEN }}