diff --git a/.github/workflows/upload.yml b/.github/workflows/upload.yml
index 6ebb1b99b..c3f28de90 100644
--- a/.github/workflows/upload.yml
+++ b/.github/workflows/upload.yml
@@ -38,7 +38,7 @@ jobs:
         # swap a GitHub OIDC token for GCP service account credentials, allowing
         # this workflow to manage the buf-plugins bucket
       - name: Auth To GCP
-        uses: google-github-actions/auth@35b0e87d162680511bf346c299f71c9c5c379033
+        uses: google-github-actions/auth@f105ef0cdb3b102a020be1767fcc8a974898b7c6
         with:
           workload_identity_provider: projects/491113660045/locations/global/workloadIdentityPools/plugins-workload-pool/providers/plugins-workload-provider
           service_account: buf-plugins-1-publisher@buf-plugins-1.iam.gserviceaccount.com