chore(deps): pin dependencies

Author: pdecat

.github/workflows/release.yml

@@ -50,4 +50,4 @@ jobs:
           prerelease: ${{ steps.check-version.outputs.prerelease == 'true' }}
 
       - name: Publish release distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0