DM-47489: Pin gh-action-pypi-publish to v1.11.0

Anything after v1.11.0 breaks invocation from composite actions:
pypa/gh-action-pypi-publish#299

Author: fajpunk

action.yaml

@@ -48,6 +48,8 @@ runs:
 
     - name: Publish
       if: fromJSON(inputs.upload) == true
-      uses: pypa/gh-action-pypi-publish@release/v1
+      # Pinned because 1.12 breaks using this in a composite action:
+      # https://github.com/pypa/gh-action-pypi-publish/issues/299
+      uses: pypa/[email protected]
       with:
         packages-dir: ${{ inputs.working-directory }}/dist