diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ce33a0a4..636ee6f1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -151,7 +151,7 @@ jobs:
           path: dist/
 
       - name: Publish to TestPyPI
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # release/v1 branch tip
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086  # release/v1 branch tip
         with:
           repository-url: https://test.pypi.org/legacy/
 
@@ -177,7 +177,7 @@ jobs:
           path: dist/
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # release/v1 branch tip
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086  # release/v1 branch tip
 
   # GitHub Release with auto-generated notes from commits since the last
   # tag. Only fires on real releases (no suffix); pre-release tags leave