diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index ebd907b..a28959b 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -120,7 +120,7 @@ jobs:
 
       - name: Attach witness to release (tag pushes only)
         if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
         with:
           files: attestations/latest.json
           fail_on_unmatched_files: false