diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f9b68f6..0ab4281 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
           node-version: "25"
           cache: npm
           registry-url: "https://registry.npmjs.org"
-      - uses: goreleaser/goreleaser-action@e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c # v7.1.0
+      - uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1
         with:
           version: nightly
           distribution: goreleaser-pro
diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
index ff20b89..2de6d46 100644
--- a/.github/workflows/snapshot.yml
+++ b/.github/workflows/snapshot.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           node-version: "25"
           cache: npm
-      - uses: goreleaser/goreleaser-action@e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c # v7.1.0
+      - uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1
         with:
           version: nightly
           args: release --snapshot --clean