ci: pin GH-action semantic-release to v7.28.1 (#359)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>

Author: jkowalleck

.github/workflows/manual-release-candidate.yml

@@ -50,4 +50,4 @@ jobs:
         # see https://github.com/pypa/gh-action-pypi-publish
         uses: pypa/gh-action-pypi-publish@master
         with:
-          password: ${{ secrets.PYPI_TOKEN }}
+          password: ${{ secrets.PYPI_TOKEN }}

.github/workflows/release.yml

@@ -71,9 +71,12 @@ jobs:
       - name: Python Semantic Release
         id: semantic-release
         # see https://python-semantic-release.readthedocs.io/en/latest/automatic-releases/github-actions.html
-        uses: relekang/python-semantic-release@master
+        # see https://github.com/relekang/python-semantic-release
+        uses: relekang/python-semantic-release@v7.28.1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
+          repository_username: __token__
+          repository_password: ${{ secrets.PYPI_TOKEN }}
           pypi_token: ${{ secrets.PYPI_TOKEN }}
       - name: post-hook
         id: after-release