diff --git a/.github/workflows/cargo-publish.yaml b/.github/workflows/cargo-publish.yaml
index 0529484..3cd2694 100644
--- a/.github/workflows/cargo-publish.yaml
+++ b/.github/workflows/cargo-publish.yaml
@@ -76,7 +76,7 @@ jobs:
 
       - name: Exchange GitHub OIDC identity for a short-lived registry token
         id: auth
-        uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18 # v1.0.5
+        uses: rust-lang/crates-io-auth-action@3268eb413133e2960fa4ae0e963ca76380c54cd9 # v1.0.6
 
       - name: Verify OIDC exchange without publishing
         if: inputs.publish == false