diff --git a/.github/workflows/branch.yml b/.github/workflows/branch.yml
index 57570e7..9b3d818 100644
--- a/.github/workflows/branch.yml
+++ b/.github/workflows/branch.yml
@@ -20,7 +20,7 @@ jobs:
       # NOTE - this doesn't currently work if the PR is coming from a fork, due to limitations in GitHub actions secrets
       - name: Post PR comment
         if: failure()
-        uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2
+        uses: mshick/add-pr-comment@ec328af66588ab8f77cdeb2c264f14aba45bbf59 # v3.12.0
         with:
           message: |
             ## This PR is against the `main` branch :x: