diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index edaf972..e897cc7 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -71,7 +71,7 @@ jobs:
           ls -l dist
 
       - name: Publish to PyPI as opencode-setup-system
-        uses: pypa/gh-action-pypi-publish@a892a5a61159132606e93a2fa6f4358831b04d26  # v1.14.2
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
         with:
           # Attestations are what make this channel checkable at all: PyPI
           # keeps a PEP 740 bundle naming this repository, this workflow and