diff --git a/.github/workflows/Publish.yml b/.github/workflows/Publish.yml
index d76fe2c..6bd3c4d 100644
--- a/.github/workflows/Publish.yml
+++ b/.github/workflows/Publish.yml
@@ -141,7 +141,7 @@ jobs:
             # crates.io rejects API tokens for crates with trusted publishing
             # enabled; the registration must match repo + workflow + environment.
             - name: Get crates.io publish token (trusted publishing)
-              uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18 # v1.0.5
+              uses: rust-lang/crates-io-auth-action@3268eb413133e2960fa4ae0e963ca76380c54cd9 # v1.0.6
               id: auth
 
             - name: Publish to crates.io