diff --git a/.github/workflows/obs.yml b/.github/workflows/obs.yml
index d5af743..f0d76ee 100644
--- a/.github/workflows/obs.yml
+++ b/.github/workflows/obs.yml
@@ -154,7 +154,7 @@ jobs:
           path: build/bundle
       - run: scripts/sign-artifacts
         if: ${{ inputs.skip-bundles == false && github.event_name != 'pull_request' }}
-      - uses: google-github-actions/upload-cloud-storage@22121cd842b0d185e042e28d969925b538c33d77 # v2.1.0
+      - uses: google-github-actions/upload-cloud-storage@d48bfaba2b6e80caafb45e7937e85e2c082d7f38 # v2.1.1
         if: ${{ inputs.skip-bundles == false && github.event_name != 'pull_request' }}
         with:
           path: build/bundle
@@ -165,7 +165,7 @@ jobs:
         if: ${{ inputs.skip-bundles == false && github.event_name != 'pull_request' }}
         run: find . -type f -iname "cri-o.amd64.*.tar.gz" | sed -n 's;.*amd64.\(.*\).tar.gz;\1;p' > latest-bundle-${{ inputs.revision || 'main' }}.txt
       - name: Upload bundle marker
-        uses: google-github-actions/upload-cloud-storage@22121cd842b0d185e042e28d969925b538c33d77 # v2.1.0
+        uses: google-github-actions/upload-cloud-storage@d48bfaba2b6e80caafb45e7937e85e2c082d7f38 # v2.1.1
         if: ${{ inputs.skip-bundles == false && github.event_name != 'pull_request' }}
         with:
           path: latest-bundle-${{ inputs.revision || 'main' }}.txt