diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 996b299..79e8e41 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -103,7 +103,7 @@ jobs:
       # get-version too: @semantic-release/git's verifyConditions runs `git push --dry-run`
       # even in dry-run mode. Same mechanism as lukislp/studylife's ci-cd.yml.
       - name: Push as the semantic-release deploy key (if configured)
-        uses: lukislp/ci-workflows/.github/actions/deploy-key-push@0d352a3fab2ba9099b957c4164be2411f13786e8 # v1.7.12
+        uses: lukislp/ci-workflows/.github/actions/deploy-key-push@4375bd6888bc28572ea26fdc50eb98c5ffa820f8 # v1.7.21
         with:
           deploy-key: ${{ secrets.SEMANTIC_RELEASE_DEPLOY_KEY }}
       - id: semrel
@@ -182,7 +182,7 @@ jobs:
       # get-version too: @semantic-release/git's verifyConditions runs `git push --dry-run`
       # even in dry-run mode. Same mechanism as lukislp/studylife's ci-cd.yml.
       - name: Push as the semantic-release deploy key (if configured)
-        uses: lukislp/ci-workflows/.github/actions/deploy-key-push@0d352a3fab2ba9099b957c4164be2411f13786e8 # v1.7.12
+        uses: lukislp/ci-workflows/.github/actions/deploy-key-push@4375bd6888bc28572ea26fdc50eb98c5ffa820f8 # v1.7.21
         with:
           deploy-key: ${{ secrets.SEMANTIC_RELEASE_DEPLOY_KEY }}
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1