diff --git a/.github/workflows/publish-pecl.yml b/.github/workflows/publish-pecl.yml
index bb630eb2..95d1c7d5 100644
--- a/.github/workflows/publish-pecl.yml
+++ b/.github/workflows/publish-pecl.yml
@@ -356,6 +356,6 @@ jobs:
 
       - name: Attest package provenance
         if: github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.create-release == 'true')
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: ${{ steps.build-package.outputs.package-file }}