diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c7cec46..5a56b95 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -228,7 +228,7 @@ jobs:
       # attaches a publisher only to an existing crate, so 0.0.0 is published
       # by hand with an API token first. Every released version comes after it,
       # because this job cannot publish a version that already exists.
-      - uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18 # v1.0.5
+      - uses: rust-lang/crates-io-auth-action@3268eb413133e2960fa4ae0e963ca76380c54cd9 # v1.0.6
         id: auth
 
       - name: Publish to crates.io