Merge pull request #135 from ruby/dependabot/github_actions/ruby/setup-ruby-1.290.0

Bump ruby/setup-ruby from 1.288.0 to 1.290.0

Author: hsbt

.github/workflows/publish.yml

@@ -68,7 +68,7 @@ jobs:
         if: ${{ github.actor != 'dependabot[bot]' && github.event.pull_request.head.repo.fork == false }}
 
       - name: Resolve build_ruby version
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+        uses: ruby/setup-ruby@6ca151fd1bfcfd6fe0c4eb6837eb0584d0134a0c # v1.290.0
         with:
           ruby-version: '${{ matrix.entry.build_ruby }}'
           bundler: none