diff --git a/.github/workflows/publish-rust.yml b/.github/workflows/publish-rust.yml
index b51ed01..7b58360 100644
--- a/.github/workflows/publish-rust.yml
+++ b/.github/workflows/publish-rust.yml
@@ -258,7 +258,7 @@ jobs:
 
       - name: Generate SLSA provenance
         if: ${{ inputs.dry-run == false }}
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6  # v4.2.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d  # v4.2.1
         env:
           NODE_OPTIONS: "--max-http-header-size=32768"
         with: