diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9a21ec9..f8a8a20 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -139,7 +139,7 @@ jobs:
             sbom.cdx.json
 
       - name: Attach SBOMs + signatures to release
-        uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8  # v2.3.2
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda  # v3.0.0
         if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
         with:
           files: |