diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 28cd6f4..366f131 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -22,7 +22,7 @@ jobs:
           node-version: "24"
           registry-url: "https://registry.npmjs.org"
           package-manager-cache: false # never use caching in release builds
-      - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
       - run: pnpm ci
       - name: Create Release Pull Request or Publish
         id: changesets