diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c835318..4ff02c4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -441,7 +441,7 @@ jobs:
 
       # ── Sigstore cosign signing ──────────────────────────────
       - name: Install cosign
-        uses: sigstore/cosign-installer@f713795cb21599bc4e5c4b58cbad1da852d7eeb9 # v3
+        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
 
       - name: Sign release artifacts with cosign
         run: |