diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 1b1be86b..8b95dc81 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: review changed dependencies
-        uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294
         with:
           # A real gate, not a rubber stamp, but scoped to what a PR introduces:
           # fail on a newly added high/critical-severity dependency. Licence