diff --git a/.github/workflows/publish-first-cohort.yml b/.github/workflows/publish-first-cohort.yml
index 319fc9d..6f7764c 100644
--- a/.github/workflows/publish-first-cohort.yml
+++ b/.github/workflows/publish-first-cohort.yml
@@ -238,7 +238,7 @@ jobs:
           path: dist
 
       - name: Publish the Python runtime with its PyPI attestation
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1
         with:
           packages-dir: dist/pypi
           skip-existing: true
diff --git a/scripts/verify-publication-policy.py b/scripts/verify-publication-policy.py
index 2b3a4b1..a357bb2 100644
--- a/scripts/verify-publication-policy.py
+++ b/scripts/verify-publication-policy.py
@@ -139,7 +139,7 @@ def main() -> int:
         "name: package-release-v0.3.4",
         'SOURCE_DATE_EPOCH: "315532800"',
         "NuGet/login@8d196754b4036150537f80ac539e15c2f1028841",
-        "pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33",
+        "pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086",
         "skip-existing: true",
         "Verify public package availability",
     ):