chore: Fix deployment for provider package

Author: jsonbailey

.github/workflows/manual-publish.yml

@@ -83,7 +83,7 @@ jobs:
           ssm_parameter_pairs: '/production/common/releasing/pypi/token = PYPI_AUTH_TOKEN'
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
         with:
           password: ${{ env.PYPI_AUTH_TOKEN }}
           packages-dir: packages/sdk/server-ai/dist/
@@ -124,11 +124,7 @@ jobs:
           ssm_parameter_pairs: '/production/common/releasing/pypi/token = PYPI_AUTH_TOKEN'
 
       - name: Publish to PyPI
-        # Pin the action to a full 40-character commit SHA for security.
-        # Release v1 commit SHA as of 2024-06-14:
-        # https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.8.13
-        # Commit SHA: 19af04270e8d898ea07a523bb392fa7fe98df87c
-        uses: pypa/gh-action-pypi-publish@19af04270e8d898ea07a523bb392fa7fe98df87c
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
         with:
           password: ${{ env.PYPI_AUTH_TOKEN }}
           packages-dir: packages/ai-providers/server-ai-langchain/dist/
@@ -167,8 +163,7 @@ jobs:
 
       - name: Publish to PyPI
         if: ${{ inputs.dry_run != true }}
-        # https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.8.13 - pinned to commit on 2024-04-13
-        uses: pypa/gh-action-pypi-publish@3cc2c35166dfc1e5ea3bb0491ffdeedcaa50d7c
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
         with:
           password: ${{ env.PYPI_AUTH_TOKEN }}
           packages-dir: ${{ inputs.workspace_path }}/dist/