diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 6bd009a1..a6c2cc13 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -21,7 +21,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-      - uses: hynek/build-and-inspect-python-package@d44ca7d91762de7a7d5436ddae667c6da6d1c3df # v2.18.0
+      - uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5 # v3.0.1
 
   publish:
     name: Publish
diff --git a/docs/guides/gha_pure.md b/docs/guides/gha_pure.md
index aeb956e6..009a8fc3 100644
--- a/docs/guides/gha_pure.md
+++ b/docs/guides/gha_pure.md
@@ -111,7 +111,7 @@ pre-upload checks & nice GitHub summaries.
 ```yaml
 steps:
   - uses: actions/checkout@v7
-  - uses: hynek/build-and-inspect-python-package@v2
+  - uses: hynek/build-and-inspect-python-package@v3.0.1
 ```
 
 The artifact it produces is named `Packages`, so that's what you need to use
@@ -215,7 +215,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@v3.0.1
 
   publish:
     needs: [dist]
@@ -266,7 +266,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@v3.0.1
 
   publish:
     needs: [dist]
diff --git a/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %} b/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %}
index 9d33754e..c0b9be00 100644
--- a/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %}	
+++ b/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %}	
@@ -34,7 +34,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@v3.0.1
 
   publish:
     needs: [dist]