diff --git a/.github/workflows/linux-release.yml b/.github/workflows/linux-release.yml
index 7f10182e..96b0edca 100644
--- a/.github/workflows/linux-release.yml
+++ b/.github/workflows/linux-release.yml
@@ -116,7 +116,7 @@ jobs:
       - name: upload artifacts
         # Only attach to a real release; a manual test build has nothing to upload to.
         if: github.event_name == 'release'
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda  # v3.0.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b  # v3.0.1
         with:
           files: |
             dist/StemDeck-Linux-x64.tar.gz
diff --git a/.github/workflows/macos-release.yml b/.github/workflows/macos-release.yml
index 54fb155e..99cb34b8 100644
--- a/.github/workflows/macos-release.yml
+++ b/.github/workflows/macos-release.yml
@@ -117,7 +117,7 @@ jobs:
           done
 
       - name: upload artifacts
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda  # v3.0.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b  # v3.0.1
         with:
           files: |
             .build/macos-dist/StemDeck-macOS-arm64.dmg
diff --git a/.github/workflows/windows-release.yml b/.github/workflows/windows-release.yml
index a29536c5..f605a6f4 100644
--- a/.github/workflows/windows-release.yml
+++ b/.github/workflows/windows-release.yml
@@ -94,7 +94,7 @@ jobs:
           Write-Host "ClamAV scan completed successfully. No infected files reported."
 
       - name: upload artifacts
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda  # v3.0.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b  # v3.0.1
         with:
           files: |
             dist/StemDeck-Windows-x64.NVIDIA.zip