diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6fb1221f..640dc9e9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -174,7 +174,7 @@ jobs:
       # to prove the artifact was built by THIS workflow on this repo,
       # not substituted somewhere downstream.
       - name: Attest build provenance (SLSA)
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: |
             release/*.tar.gz