diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 12a993d..aa8c0e5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -69,6 +69,6 @@ jobs:
       # Scans Cargo.lock for RustSec advisories; honors the ignore list in
       # deny.toml. Third-party action: pinned to a commit SHA (dependabot
       # keeps it fresh).
-      - uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
+      - uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
         with:
           command: check advisories