diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index bb63b7c3..c45f75a4 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -265,7 +265,7 @@ jobs:
                   twine check dist/*
 
             - name: "Upload to Test PyPI"
-              uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1
+              uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
               with:
                   repository-url: https://test.pypi.org/legacy/
                   # dev versions already keep each version unique; this only
@@ -331,4 +331,4 @@ jobs:
                   rm ./dist/*.sigstore.json
 
             - name: "Upload to PyPI"
-              uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1
+              uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2