set publish.yml dep version

Author: gabrielburnworth

.github/workflows/publish.yml

@@ -61,7 +61,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v3
+      uses: sigstore/gh-action-sigstore-python@v3.5.3
       with:
         inputs: >-
           ./dist/*.tar.gz