chore: add sha key for publishing package

Author: abelaba

.github/workflows/publish-to-pypi.yml

@@ -30,6 +30,6 @@ jobs:
           --outdir dist/
       - name: Publish distribution 📦 to PyPI
         if: startsWith(github.ref, 'refs/tags')
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
         with:
           password: ${{ secrets.PYPI_API_TOKEN_OPTIMAGIC }}