diff --git a/.github/workflows/build-pypi.yml b/.github/workflows/build-pypi.yml
index f74d86458..cff1fd843 100644
--- a/.github/workflows/build-pypi.yml
+++ b/.github/workflows/build-pypi.yml
@@ -114,7 +114,7 @@ jobs:
           merge-multiple: true
           path: dist
       - name: Publish nightly wheels to test.pypi.org
-        uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # ratchet:pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # ratchet:pypa/gh-action-pypi-publish@release/v1
         with:
           repository-url: https://test.pypi.org/legacy/
   sucess-push: # https://github.com/marketplace/actions/alls-green#why
diff --git a/.github/workflows/create-releases.yml b/.github/workflows/create-releases.yml
index dc21fe60b..cb0f2b038 100644
--- a/.github/workflows/create-releases.yml
+++ b/.github/workflows/create-releases.yml
@@ -94,7 +94,7 @@ jobs:
       - name: Smoke test compiled artefacts
         run: ls -R dist
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # ratchet:pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # ratchet:pypa/gh-action-pypi-publish@release/v1
         with:
           print-hash: true
   binary-distribution: