diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index 5c5633a..b0b9a72 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -379,7 +379,7 @@ jobs:
       # dependency is pinned by integrity hash before the Azure session exists.
       - run: pnpm install --frozen-lockfile
         working-directory: .github/release-tools
-      - uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
+      - uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}