ci: Use allowed action version

Author: rsenden

.github/workflows/publish.yml

@@ -51,7 +51,7 @@ jobs:
 
       - name: Publish v{major} tag
         if: steps.release_please.outputs.release_created
-        uses: richardsimko/update-tag@v1
+        uses: richardsimko/update-tag@aab2434e9a5040687874aa39d1c6377ec0cb0d94
         with:
           tag_name: v${{steps.release_please.outputs.major}}
         env: