Updated workflow dependencies

Author: joergschultzelutter

publish-to-pypi.yml

@@ -84,14 +84,15 @@ jobs:
   # to next Github Actions job in line.
   get-python-version-info:
     runs-on: ubuntu-latest
+    permissions: write-all
 
     # Output which is passed to the PyPi publication job
     outputs: 
       my-program-version: ${{ steps.regex.outputs.group1 }}
 
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v3.5.3
 
       # Read source file
       - name: Read source file
@@ -158,10 +159,10 @@ jobs:
 
     steps:
 
-    - uses: actions/checkout@v3.5.2
+    - uses: actions/checkout@v3.5.3
     # Set up Python environment
     - name: Set up Python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: '${{ env.PYTHON_VERSION }}'
 
@@ -178,15 +179,15 @@ jobs:
     # Unlike for the Prod branch, we will push both releases and prerelease to PyPi Test
     - name: Publish package to Test PyPi
       if: github.event_name == 'release' && startsWith(github.ref, 'refs/tags')
-      uses: pypa/gh-action-pypi-publish@release/v1
+      uses: pypa/gh-action-pypi-publish@release/v1.8.7
       with:
         user: __token__
         password: ${{ secrets.TEST_PYPI_API_TOKEN }}
         repository_url: https://test.pypi.org/legacy/
     # Publish everything to Prod PyPi but only if it is not a prerelease
     - name: Publish package to Prod PyPi
       if: github.event_name == 'release' && startsWith(github.ref, 'refs/tags') && !github.event.release.prerelease
-      uses: pypa/gh-action-pypi-publish@release/v1
+      uses: pypa/gh-action-pypi-publish@release/v1.8.7
       with:
         user: __token__
         password: ${{ secrets.PROD_PYPI_API_TOKEN }}