diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml
index f3793e3..9ec2963 100644
--- a/.github/workflows/update-flake-lock.yml
+++ b/.github/workflows/update-flake-lock.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Pre-update flake.lock
         run: nix develop --command update
       - name: Update flake.lock
-        uses: DeterminateSystems/update-flake-lock@428c2b58a4b7414dabd372acb6a03dba1084d3ab # v25
+        uses: DeterminateSystems/update-flake-lock@834c491b2ece4de0bbd00d85214bb5e83b4da5c6 # v28
         with:
           pr-title: "bump: update flake.lock"
           commit-msg: "bump: update flake.lock"