diff --git a/.github/workflows/assigned.yaml b/.github/workflows/assigned.yaml
index 5a22117b6..e3b8a51a3 100644
--- a/.github/workflows/assigned.yaml
+++ b/.github/workflows/assigned.yaml
@@ -18,7 +18,7 @@ jobs:
     # we pin this action to a version tested and audited by certbot's
     # maintainers for extra security. the full hash is used as doing so is
     # recommended by zizmor
-    - uses: mattermost/action-mattermost-notify@b7d118e440bf2749cd18a4a8c88e7092e696257a
+    - uses: mattermost/action-mattermost-notify@ae31bb6f9e26a54336e79696f108a2c91cf55b4e
       with:
         MATTERMOST_WEBHOOK_URL: ${{ secrets.MATTERMOST_ASSIGN_WEBHOOK }}
         TEXT: >
diff --git a/.github/workflows/merged.yaml b/.github/workflows/merged.yaml
index 1766b248f..838e02ff2 100644
--- a/.github/workflows/merged.yaml
+++ b/.github/workflows/merged.yaml
@@ -20,7 +20,7 @@ jobs:
     # we pin this action to a version tested and audited by certbot's
     # maintainers for extra security. the full hash is used as doing so is
     # recommended by zizmor
-    - uses: mattermost/action-mattermost-notify@b7d118e440bf2749cd18a4a8c88e7092e696257a
+    - uses: mattermost/action-mattermost-notify@ae31bb6f9e26a54336e79696f108a2c91cf55b4e
       with:
         MATTERMOST_WEBHOOK_URL: ${{ secrets.MATTERMOST_MERGE_WEBHOOK }}
         TEXT: >
diff --git a/.github/workflows/notify_nightly.yml b/.github/workflows/notify_nightly.yml
index c86efa9ff..0d0d60590 100644
--- a/.github/workflows/notify_nightly.yml
+++ b/.github/workflows/notify_nightly.yml
@@ -28,7 +28,7 @@ jobs:
         echo "result = $DURATION"
         echo "result=$DURATION" >> "$GITHUB_OUTPUT"
     - name: Send to mattermost
-      uses: mattermost/action-mattermost-notify@b7d118e440bf2749cd18a4a8c88e7092e696257a
+      uses: mattermost/action-mattermost-notify@ae31bb6f9e26a54336e79696f108a2c91cf55b4e
       with:
         MATTERMOST_WEBHOOK_URL: ${{ secrets.MATTERMOST_PUBLIC_CERTBOT_CHANNEL_WEBHOOK }}
         PAYLOAD: |-
diff --git a/.github/workflows/notify_weekly.yaml b/.github/workflows/notify_weekly.yaml
index 29b3fb587..6d55a43d0 100644
--- a/.github/workflows/notify_weekly.yaml
+++ b/.github/workflows/notify_weekly.yaml
@@ -19,7 +19,7 @@ jobs:
     # we pin this action to a version tested and audited by certbot's
     # maintainers for extra security. the full hash is used as doing so is
     # recommended by zizmor
-    - uses: mattermost/action-mattermost-notify@b7d118e440bf2749cd18a4a8c88e7092e696257a
+    - uses: mattermost/action-mattermost-notify@ae31bb6f9e26a54336e79696f108a2c91cf55b4e
       with:
         MATTERMOST_WEBHOOK_URL: ${{ secrets.MATTERMOST_WEBHOOK_URL }}
         MATTERMOST_CHANNEL: private-certbot
diff --git a/.github/workflows/review_requested.yaml b/.github/workflows/review_requested.yaml
index 162c1c485..48a3e8a17 100644
--- a/.github/workflows/review_requested.yaml
+++ b/.github/workflows/review_requested.yaml
@@ -20,7 +20,7 @@ jobs:
     # we pin this action to a version tested and audited by certbot's
     # maintainers for extra security. the full hash is used as doing so is
     # recommended by zizmor
-    - uses: mattermost/action-mattermost-notify@b7d118e440bf2749cd18a4a8c88e7092e696257a
+    - uses: mattermost/action-mattermost-notify@ae31bb6f9e26a54336e79696f108a2c91cf55b4e
       with:
         MATTERMOST_WEBHOOK_URL: ${{ secrets.MATTERMOST_ASSIGN_WEBHOOK }}
         TEXT: >