diff --git a/.github/workflows/branch.yml b/.github/workflows/branch.yml
index 57570e7..312ec81 100644
--- a/.github/workflows/branch.yml
+++ b/.github/workflows/branch.yml
@@ -20,7 +20,7 @@ jobs:
       # NOTE - this doesn't currently work if the PR is coming from a fork, due to limitations in GitHub actions secrets
       - name: Post PR comment
         if: failure()
-        uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2
+        uses: mshick/add-pr-comment@8e4927817251f1ff60c001f04568532b38e0b4a0 # v3.11.0
         with:
           message: |
             ## This PR is against the `main` branch :x: