diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 40b6744..6c3002f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
           set -eu
           git archive --format=tar.gz --prefix="${TAG}/" HEAD > "${TAG}-source.tar.gz"
           sha256sum "${TAG}-source.tar.gz" > "${TAG}-source.tar.gz.sha256"
-      - uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
+      - uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
         with:
           subject-path: '${{ github.ref_name }}-source.tar.gz'
       - name: Upload release assets