diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 812b746..7ad4ab2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -69,7 +69,7 @@ jobs:
       # attach the jar + checksums to the draft, then publish it in the next step — the
       # published release is immutable WITH its assets already in place.
       - name: Create draft release with assets
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3
         with:
           draft: true
           files: |