diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1bcad07..930cc5e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -86,7 +86,7 @@ jobs:
           cosign sign --yes ${images}
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ghcr.io/${{ github.repository }}-api
           subject-digest: ${{ steps.build.outputs.digest }}
@@ -160,7 +160,7 @@ jobs:
           cosign sign --yes ${images}
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ghcr.io/${{ github.repository }}-web
           subject-digest: ${{ steps.build.outputs.digest }}