diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6a54d2f..a94f2d4 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -153,7 +153,7 @@ jobs:
           sha256sum -c artifact.sha256
 
       - name: Publish exact verified distributions
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1 2026-07-28
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1 2026-07-28
         with:
           packages-dir: ${{ runner.temp }}/release-artifact/dist/
           skip-existing: true