diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5bf163a..4bd3581 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -52,7 +52,7 @@ jobs:
           name: dist
           path: dist/
       - name: Publish (trusted publishing, PEP 740 attestations)
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1
         with:
           attestations: true
           # The `if:` above decides *which builds may publish*. This decides what