ci: pin pypi publish action to requested release commit

Author: jgarciab

.github/workflows/python-publish.yml

@@ -34,7 +34,7 @@ jobs:
         run: python -m twine check dist/*
 
       - name: Publish package
-        uses: pypa/gh-action-pypi-publish@7eb3b701d11256e583f5b49899c5e7203deab573
+        uses: pypa/gh-action-pypi-publish@db8f07d3871a0a180efa06b95d467625c19d5d5f
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}