diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0803ca4..0ad0fed 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -161,7 +161,7 @@ jobs:
           path: sbom-out
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64  # v3
+        uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3  # v3
         with:
           # `generate_release_notes` stays OFF, deliberately — do not "helpfully" restore it.
           # The action appends the WHOLE generated block (`<body>\n\n<notes>`, see