diff --git a/.github/workflows/npm-packages.yml b/.github/workflows/npm-packages.yml
index ff8ac30..170e3dc 100644
--- a/.github/workflows/npm-packages.yml
+++ b/.github/workflows/npm-packages.yml
@@ -100,7 +100,7 @@ jobs:
       # create release if it's a tag like vx.y.z
       - if: github.repository == 'WaveSpeedAI/wavespeed-javascript' && github.ref_type == 'tag' && startsWith(github.ref, 'refs/tags/v')
         name: Release
-        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
         with:
           files: |
             dist/*/*.tgz