diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index efacbc8fc8..d4f659afb4 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -81,7 +81,7 @@ jobs:
 
       - name: upload artifacts
         if: ${{ inputs.prepare == true }}
-        uses: softprops/action-gh-release@fe965f7af51af5f2602596916f38a38df2e33de0 # v3.0.2
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
           files: "${{ steps.package.outputs.path }}"
           fail_on_unmatched_files: true
diff --git a/.github/workflows/publish-swift.yml b/.github/workflows/publish-swift.yml
index 1bb5b6cf51..3be72a49aa 100644
--- a/.github/workflows/publish-swift.yml
+++ b/.github/workflows/publish-swift.yml
@@ -48,7 +48,7 @@ jobs:
           artifact-generation: ${{ vars.ARTIFACT_GENERATION }}
 
       - name: upload xcframework
-        uses: softprops/action-gh-release@fe965f7af51af5f2602596916f38a38df2e33de0 # v3.0.2
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
             files: |
               crypto-ffi/bindings/swift/WireCoreCrypto.xcframework.zip
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 6e666e95eb..6080a99578 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -58,7 +58,7 @@ jobs:
         run: cargo test --doc --locked
       - name: "upload test results"
         if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@fe965f7af51af5f2602596916f38a38df2e33de0 # v3.0.2
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
           files: target/nextest/default/junit.xml
           fail_on_unmatched_files: true