diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 05cbc3f8..31d86389 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -341,7 +341,7 @@ jobs:
             --expected-manifest-sha256 "$EXPECTED_MANIFEST_SHA256"
 
       - name: Publish to TestPyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
+        uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # release/v1
         with:
           repository-url: https://test.pypi.org/legacy/
           packages-dir: ${{ runner.temp }}/python-distributions/packages/
@@ -401,7 +401,7 @@ jobs:
             --expected-manifest-sha256 "$EXPECTED_MANIFEST_SHA256"
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
+        uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # release/v1
         with:
           packages-dir: ${{ runner.temp }}/python-distributions/packages/
   # docsync:evidence.end evidence.release.publish_workflow