Pin hash for cibuildwheel

.github/workflows/pypi.yml

@@ -80,7 +80,7 @@ jobs:
           persist-credentials: false
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.23.3
+        uses: pypa/cibuildwheel@faf86a6ed7efa889faf6996aa23820831055001a # v2.23.3
 
       - name: Attest GitHub build provenance
         uses: actions/attest-build-provenance@v2