diff --git a/.github/workflows/publish-rubygems.yml b/.github/workflows/publish-rubygems.yml
index 4af8f78..6e75346 100644
--- a/.github/workflows/publish-rubygems.yml
+++ b/.github/workflows/publish-rubygems.yml
@@ -60,7 +60,7 @@ jobs:
       # same OIDC credential action release-gem uses internally, then build + push the gem
       # explicitly — no rake, no Rakefile, no Gemfile.lock, no git write needed.
       - name: Configure RubyGems credentials via OIDC trusted publishing
-        uses: rubygems/configure-rubygems-credentials@762a4b77c3300434bb57c7ce80b20e36231927aa # v2.0.0
+        uses: rubygems/configure-rubygems-credentials@dc5a8d8553e6ee01fc26761a49e99e733d17954a # v2.1.0
       - name: Build + push gem
         run: |
           gem build wave-sdk.gemspec