diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b1478625..ebeb1f59 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,7 +75,7 @@ jobs:
         run: go test -v -count=1 -run '^TestLiveServiceLifecycle$' -timeout=4m ./internal/setup
       - name: Rehearse release packaging
         if: runner.os == 'Linux' && inputs.ref == '' && !startsWith(github.ref, 'refs/tags/')
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           version: v2.18.0
           args: release --snapshot --clean
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c772cec0..8fc19a88 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -157,7 +157,7 @@ jobs:
           echo "ERRAND_SIGNING_KEYCHAIN=$ERRAND_SIGNING_KEYCHAIN" >> "$GITHUB_ENV"
           echo "ERRAND_NOTARY_KEY=$ERRAND_NOTARY_KEY" >> "$GITHUB_ENV"
       - name: Build release archives
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           version: v2.18.0
           args: release --clean --skip=publish --timeout=40m