diff --git a/.github/workflows/_fleet-acceptance.yaml b/.github/workflows/_fleet-acceptance.yaml
index 3b22c1d..3a9dbb7 100644
--- a/.github/workflows/_fleet-acceptance.yaml
+++ b/.github/workflows/_fleet-acceptance.yaml
@@ -182,7 +182,7 @@ jobs:
           path: ${{ runner.temp }}/fleet/admission
           merge-multiple: true
           digest-mismatch: error
-      - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+      - uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         timeout-minutes: 5
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -307,7 +307,7 @@ jobs:
         timeout-minutes: 12
         with:
           private-diagnostics: "true"
-      - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+      - uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         timeout-minutes: 5
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -499,7 +499,7 @@ jobs:
         run: |
           set -euo pipefail
           "$PYTHON" -B scripts/coordinate-release-fleet.py wait-ready --root "$RUNNER_TEMP/fleet" --timeout 2700
-      - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+      - uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         timeout-minutes: 5
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -631,7 +631,7 @@ jobs:
           path: ${{ runner.temp }}/fleet/ownership
           merge-multiple: true
           digest-mismatch: error
-      - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+      - uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         timeout-minutes: 5
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
diff --git a/.github/workflows/_fleet-reconcile.yaml b/.github/workflows/_fleet-reconcile.yaml
index e03e9f6..29b7d61 100644
--- a/.github/workflows/_fleet-reconcile.yaml
+++ b/.github/workflows/_fleet-reconcile.yaml
@@ -110,7 +110,7 @@ jobs:
           path: ${{ runner.temp }}/fleet/ownership
           merge-multiple: true
           digest-mismatch: error
-      - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+      - uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         if: steps.ownership.outputs.ownership-id != ''
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
diff --git a/.github/workflows/_siteops-deploy.yaml b/.github/workflows/_siteops-deploy.yaml
index b068744..273f720 100644
--- a/.github/workflows/_siteops-deploy.yaml
+++ b/.github/workflows/_siteops-deploy.yaml
@@ -127,7 +127,7 @@ jobs:
           printf '%s' "$SITE_OVERRIDES" | python3 scripts/generate-site-overrides.py "$INPUT_WORKSPACE"
 
       - name: Azure Login (OIDC)
-        uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+        uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
diff --git a/.github/workflows/e2e-test.yaml b/.github/workflows/e2e-test.yaml
index 3b57044..158728b 100644
--- a/.github/workflows/e2e-test.yaml
+++ b/.github/workflows/e2e-test.yaml
@@ -1022,7 +1022,7 @@ jobs:
 
       - uses: ./.github/actions/create-k3s-cluster
 
-      - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+      - uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
diff --git a/.github/workflows/integration-test.yaml b/.github/workflows/integration-test.yaml
index 7298387..70767a0 100644
--- a/.github/workflows/integration-test.yaml
+++ b/.github/workflows/integration-test.yaml
@@ -71,7 +71,7 @@ jobs:
           install-dev: true
 
       - name: Azure Login (OIDC)
-        uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
+        uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}