diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 753a798..9678878 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -111,7 +111,7 @@ jobs:
       - name: Draft release
         # A draft: the owner smoke-tests the assets and publishes by hand (see
         # RELEASING.md). A tag with a "-" (v1.2.0-rc1) is a pre-release.
-        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
         with:
           draft: true
           prerelease: ${{ contains(github.ref_name, '-') }}