diff --git a/.github/workflows/deploy-api.yml b/.github/workflows/deploy-api.yml
index 547296e..b92c1ed 100644
--- a/.github/workflows/deploy-api.yml
+++ b/.github/workflows/deploy-api.yml
@@ -83,7 +83,7 @@ jobs:
           echo "Clean: $(find . -type f | wc -l) build-output files"
 
       - name: Azure login (OIDC — no stored credential)
-        uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
+        uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}