diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index 881229e..2832ea5 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Create GitHub Release
         # We pin to the SHA, not the tag, for security reasons.
         # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
-        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
         with:
           prerelease: ${{ contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc') }}
           files: "*"            # everything staged in the cwd — here, docs.zip