diff --git a/.github/workflows/build-pypi.yml b/.github/workflows/build-pypi.yml
index 0742a94d..60861299 100644
--- a/.github/workflows/build-pypi.yml
+++ b/.github/workflows/build-pypi.yml
@@ -119,7 +119,7 @@ jobs:
           name: python-artefacts
           path: dist
       - name: Publish nightly wheels to test.pypi.org
-        uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf # ratchet:pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # ratchet:pypa/gh-action-pypi-publish@release/v1
         with:
           repository-url: https://test.pypi.org/legacy/
   sucess-push: # https://github.com/marketplace/actions/alls-green#why
diff --git a/.github/workflows/create-releases.yml b/.github/workflows/create-releases.yml
index 45e3f266..8d22e6ee 100644
--- a/.github/workflows/create-releases.yml
+++ b/.github/workflows/create-releases.yml
@@ -95,7 +95,7 @@ jobs:
       - name: Smoke test compiled artefacts
         run: ls -R dist
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf # ratchet:pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # ratchet:pypa/gh-action-pypi-publish@release/v1
         with:
           print-hash: true
   # prepare-next-dev-cycle: