diff --git a/.github/workflows/release-rehearsal.yml b/.github/workflows/release-rehearsal.yml
index 3011e2b..e5ef6c1 100644
--- a/.github/workflows/release-rehearsal.yml
+++ b/.github/workflows/release-rehearsal.yml
@@ -27,7 +27,7 @@ jobs:
       - name: install pinned SBOM generator
         run: go install github.com/anchore/syft/cmd/syft@v1.44.0
       - name: build snapshot archives, checksums, and SBOMs
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           distribution: goreleaser
           version: v2.17.1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b8caf06..1e8f25b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -64,7 +64,7 @@ jobs:
         run: echo "ASSET_DIR=${RUNNER_TEMP}/aoci-release-assets" >> "$GITHUB_ENV"
 
       - name: Install pinned GoReleaser
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           distribution: goreleaser
           version: ${{ env.GORELEASER_VERSION }}