diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b9adae9..f2fb95c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -80,7 +80,7 @@ jobs:
       - name: Create GitHub Release
         # Third-party action with contents: write, so pinned to the v2 commit
         # SHA rather than a mutable tag.
-        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
         with:
           name: ${{ github.ref_name }}
           body_path: release-notes.md