diff --git a/.github/workflows/generate_monthly_changelog.yml b/.github/workflows/generate_monthly_changelog.yml
index 9548d9a8281f..0e9cbaeb4528 100644
--- a/.github/workflows/generate_monthly_changelog.yml
+++ b/.github/workflows/generate_monthly_changelog.yml
@@ -106,7 +106,7 @@ jobs:
       # Import GPG key to sign commits:
       - name: 'Import GPG key to sign commits'
         # Pin action to full length commit SHA
-        uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0
+        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
         with:
           gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}