ci: pin PyPI publish action

Author: Fermionic-Lyu

.github/workflows/publish.yml

@@ -85,7 +85,7 @@ jobs:
           path: dist/
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.14.0
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
 
   release:
     name: Create stable GitHub Release