diff --git a/.github/workflows/release-rc.yml b/.github/workflows/release-rc.yml
index 7c1e057..5aff11c 100644
--- a/.github/workflows/release-rc.yml
+++ b/.github/workflows/release-rc.yml
@@ -113,7 +113,7 @@ jobs:
           path: artifacts
 
       - name: Attest artifact directory (provenance)
-        uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: |
             artifacts/*.whl