diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 8632bd6..89f7b1c 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -90,7 +90,7 @@ jobs:
                 path: dist
 
           - name: "Upload to Test PyPI"
-            uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
+            uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
             with:
                 repository-url: https://test.pypi.org/legacy/
 
@@ -149,4 +149,4 @@ jobs:
                 rm ./dist/*.sigstore.json
 
           - name: "Upload to PyPI"
-            uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
+            uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0