diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
index c8801f5..a006440 100644
--- a/.github/workflows/build-release.yml
+++ b/.github/workflows/build-release.yml
@@ -94,6 +94,6 @@ jobs:
           path: ${{ runner.temp }}/quickpay-release
 
       - name: Attest PHAR build provenance
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: ${{ runner.temp }}/quickpay-release/quickpay