Actions: bump versions

- actions/setup-python@v4
- Use pypa/gh-action-pypi-publish@v1
  this fix a warning:
  You are using "pypa/gh-action-pypi-publish@master".
  The "master" branch of this project has been sunset
  and will not receive any updates, not even security
  bug fixes.

Signed-off-by: Hiroshi Miura <miurahr@linux.com>

.github/workflows/publish-to-pypi.yml

@@ -21,9 +21,9 @@ jobs:
       - name: Fetch release tag
         run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
       - name: Set up Python 3.7🐍
-        uses: actions/setup-python@v1
+        uses: actions/setup-python@v4
         with:
-          python-version: 3.7
+          python-version: '3.9'
       - name: Install build and twine
         run: python -m pip install build twine --user
       - name: Build release assets
@@ -32,12 +32,12 @@ jobs:
         run: python -m twine check dist/*
       - name: Publish distribution 📦 to Test PyPI when releases branch
         if: ${{ startsWith(github.event.ref, 'refs/heads/releases') }}
-        uses: pypa/gh-action-pypi-publish@master
+        uses: pypa/gh-action-pypi-publish@v1
         with:
           password: ${{ secrets.testpypi_password }}
           repository_url: https://test.pypi.org/legacy/
       - name: Publish distribution 📦 to PyPI
         if: ${{ startsWith(github.event.ref, 'refs/tags') }}
-        uses: pypa/gh-action-pypi-publish@master
+        uses: pypa/gh-action-pypi-publish@v1
         with:
           password: ${{ secrets.pypi_password }}