diff --git a/.github/workflows/validate-submission.yml b/.github/workflows/validate-submission.yml
index f06e4df..cd13e31 100644
--- a/.github/workflows/validate-submission.yml
+++ b/.github/workflows/validate-submission.yml
@@ -86,7 +86,7 @@ jobs:
         # what blocked the PR. The action handles fork PRs gracefully
         # (skips when GITHUB_TOKEN lacks pull-requests:write).
         if: always() && github.event.pull_request.number != ''
-        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2
+        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
         with:
           header: synthbench-validate-submission
           path: .submission-check/pr-comment.md