diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 11feadeb..0509180b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -59,4 +59,4 @@ jobs:
         # twine reject it ("Unknown distribution format") and blocks the release.
         # Verification above already consumed it.
         run: rm -f dist/SHA256SUMS
-      - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
+      - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0