diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index fd177ec..881aca2 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -22,7 +22,7 @@ jobs:
         # Findings are detected and summarised, but the check is allowed to pass
         # during the org-wide rollout; the PR comment still posts on failure.
         continue-on-error: true
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@v5
         with:
           fail-on-severity: high
           comment-summary-in-pr: on-failure