diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 97112c5..0803ca4 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -144,7 +144,7 @@ jobs:
 
       # OIDC: exchange the GitHub id-token for a short-lived crates.io token (no stored secret).
       - name: Authenticate to crates.io (Trusted Publishing)
-        uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18  # v1
+        uses: rust-lang/crates-io-auth-action@3268eb413133e2960fa4ae0e963ca76380c54cd9  # v1
         id: auth
 
       # cargo publish re-verifies the package builds from the packaged sources before upload.