diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index a628883..67a1c4a 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -34,7 +34,7 @@ jobs:
     - uses: volker-raschek/cosign-installer@v4.1.2-rc3
       with:
         cosign-release: "v3.1.1" # renovate: datasource=github-tags depName=sigstore/cosign
-    - uses: docker/setup-qemu-action@v4.1.0
+    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
       with:
         image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
     - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0