diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3cccfa4..3ccc53b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -66,7 +66,7 @@ jobs:
           retention-days: 1
       - name: Submit Windows artifact to SignPath Foundation signing
         if: runner.os == 'Windows' && vars.SIGNPATH_ENABLED == 'true'
-        uses: signpath/github-action-submit-signing-request@c92b958760219087e01f8d67a1669ed57afe2627 # v2
+        uses: signpath/github-action-submit-signing-request@f6d04783b4569d051e0c80105fe66e82819d0092 # v3.0
         with:
           api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
           organization-id: ${{ vars.SIGNPATH_ORGANIZATION_ID }}