diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5146c5a..9714b75 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -377,7 +377,7 @@ jobs:
         # to a full commit SHA (see SIGNING.md) — until then this step is skipped
         # and releases ship unsigned.
         if: vars.SIGNPATH_ENABLED == 'true'
-        uses: SignPath/github-action-submit-signing-request@v1
+        uses: SignPath/github-action-submit-signing-request@v3
         with:
           api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
           organization-id: ${{ vars.SIGNPATH_ORGANIZATION_ID }}