diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 699bd0e..baf177e 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -38,7 +38,7 @@ jobs:
     # ecosystem, no cooldown for devantler-tech/*).
     # Keep the ref a 40-hex commit: it is part of the cosign subject the platform
     # verifies, so its shape is load-bearing here.
-    uses: devantler-tech/actions/.github/workflows/publish-manifests.yaml@3ee6cb9bbd616c2a38779be41a5e41f3e77282d0 # v13.2.3
+    uses: devantler-tech/actions/.github/workflows/publish-manifests.yaml@a147ead8b8bc937fbfb1974e3698c7e32f95517d # v13.5.1
     with:
       oci-name: devantler-tech/github-config
       # Without this, a ref the platform verifier does not accept fails nothing