Merge pull request #426 from akatsoulas/pin-action

Pin GitHub action for PyPI to 1.4.2

Author: akatsoulas

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Run tox
         run: tox
       - name: Publish a Python distribution to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@release/v1.4.2
         with:
           user: __token__
-          password: ${{ secrets.PYPI_PASSWORD }}
+          password: ${{ secrets.PYPI_API_TOKEN }}