diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index ddced7e..707d67d 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -295,7 +295,7 @@ jobs:
           path: upload/
           merge-multiple: true
 
-      - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450  # v1.8.14
+      - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0  # v1.9.0
         if: github.event_name == 'release' && github.event.action == 'published'
         with:
           # Comment this line out to publish to PyPI