diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6d0f1da..fb1922a 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -110,6 +110,6 @@ jobs:
           path: dist
 
       # pinned to a commit, as this action can publish to PyPI; dependabot updates it
-      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
+      - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086  # v1.14.3
         with:
           skip-existing: true