chore: upgrade GitHub Actions to latest versions (#375)

* Upgrade GitHub Actions to latest versions

* Fix pypa/gh-action-pypi-publish to use SHA pinning

Pin to release/v1.13 for security best practices.
The v1 tag doesn't exist - only release/v1 branch exists.

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>

---------

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>

Author: salmanmkc

.github/workflows/publish_python_dotpromptz_package.yml

@@ -138,7 +138,7 @@ jobs:
           path: dist/
 
       - name: Publish Distribution to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e  # release/v1.13
         with:
           verbose: true
           packages-dir: dist/

.github/workflows/publish_python_handlebarrz_package.yml

@@ -298,7 +298,7 @@ jobs:
           fi
 
       - name: Publish distribution to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e  # release/v1.13
         with:
           verbose: true
           packages-dir: dist/